CVE-2022-23063: Shopizer

High severity, CVSS 8.8. EPSS: 1.2% chance of exploitation in the next 30 days.

In Shopizer versions 2.3.0 to 3.0.1 are vulnerable to Insufficient Session Expiration. When a password has been changed by the user or by an administrator, a user that was already logged in, will still have access to the application even after the password was changed.

Affected products

• Shopizer Shopizer: from 2.3.0, up to and including 3.0.1

Published 2022-05-03. Last modified 2026-06-17.