CVE-2002-0553: Cross-site scripting vulnerability in SunShop 2.5 and earlier allows remote attackers to gain administrativ...

Security readout for executives and security teams

SunShop 2.5 and earlier reportedly let a remote user place script in new-customer registration fields. If an administrator later interacted with that stored data, the script could help the attacker gain administrative privileges. This is mainly urgent for legacy ecommerce systems still exposed online. Exposure appears limited to SunShop 2.5 and earlier, especially sites with public customer registration enabled. The provided affected-product metadata is incomplete, so asset owners should verify product name and version from deployments. Treat as high priority only if SunShop 2.5 or earlier remains internet-facing. The business risk is administrative compromise of a legacy ecommerce platform; unsupported systems should be replaced or isolated quickly. Mitigation focus: Identify any SunShop deployments and confirm exact version.; Check vendor or maintainer guidance for a fixed release or supported replacement.; Disable or restrict public customer registration until exposure is understood..

Prepared

Jun 30, 2026, 13:06 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.