← Database

CVE-2022-23061

MEDIUM CVSS: 6.5 Published: 2022-05-01 Modified: 2026-06-17

Description

In Shopizer versions 2.0 to 2.17.0 a regular admin can permanently delete a superadmin (although this cannot happen according to the documentation) via Insecure Direct Object Reference (IDOR) vulnerability.

Affected Platforms

Shopizer Shopizer

Weakness Type

CWE-639, CWE-639

References