GitHub Advisoryadvisory · Packagist

GHSA-6f85-3f8q-qc94 OroCommerce vulnerable to XSS when adding class name to Selector Manager on pages that use GrapeJS editor

MEDIUM Published 2022-07-15 Modified 2022-07-15 Official page ↗
Ecosystem
Packagist
Packages
oro/commerce
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N
Weaknesses
CWE-79
Reviewed
2022-07-15

Affected packages

• Packagist oro/commerce: >= 5.0, < 5.0.4 → fixed in 5.0.4

Description

Impact Due to insufficient class name validation in GrapeJS library it's possible to add executable JS code in class name through Selector Manager Relates to • https://github.com/artf/grapesjs/issues/4411 Patch Update GrapeJS dependency to >=v0.19.5

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References