CVE-2026-62990 | Shopperlabs Shopper up to 2.10.0/3.0.0-beta.2 Team Member Creation CreateTeamMember.php store role_id cross site scripting

October 30, 2026 Yanac

A vulnerability categorized as problematic has been discovered in Shopperlabs Shopper up to 2.10.0/3.0.0-beta.2. This impacts the function packages/admin/src/Livewire/SlideOvers/CreateTeamMember::store of the file packages/admin/src/Livewire/SlideOvers/CreateTeamMember.php of the component Team Member Creation. Such manipulation of the argument role_id leads to cross site scripting.

This vulnerability is documented as CVE-2026-62990. The attack can be executed remotely. There is not any exploit available.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More