CVE-2021-47769

CVE-2021-47769 describes a persistent cross-site scripting (XSS) vulnerability in Isshue Shopping Cart version 3.5, specifically within the title input fields of its stock, customer, and invoice modules. This medium-severity flaw (CVSS 4.8) allows attackers with privileged user accounts to inject malicious scripts that execute when content is previewed, potentially leading to session hijacking or persistent phishing attacks. While the attack requires high privileges and user interaction, its impact includes low confidentiality and integrity. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this vulnerability.