CVE-2021-41672

MediumCVSS 6.5

Published: 15/06/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.34%

68th percentile - higher than 68% of all known CVEs

Summary

PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php. An authenticated administrator can inject a malicious SQL query, affecting application logic and retrieving database information.

Risk Assessment

An attacker with admin privileges can read, modify, or delete sensitive database records, compromising data confidentiality and integrity.

Recommendation

Immediately upgrade PEEL Shopping CMS to the latest version and use parameterized queries or prepared statements to prevent SQL injection.

Original NVD description (English source)

PEEL Shopping CMS 9.4.0 is vulnerable to authenticated SQL injection in utilisateurs.php. A user that belongs to the administrator group can inject a malicious SQL query in order to affect the execution logic of the application and retrive information from the database.