CVE-2022-43321

33th percentile - higher than 33% of all known CVEs

Shopwind v3.4.3 was discovered to contain a reflected XSS vulnerability in the /common/library/Page.php component. An attacker can inject a malicious script that executes in the victim's browser.

The risk includes potential session theft, redirection to malicious sites, or other actions performed in the victim's session context.

Update Shopwind to the latest patched version and implement input filtering in the Page.php component.