GitHub Advisoryadvisory · Packagist

GHSA-7vmw-7x57-q6jw Cross-site scripting

MEDIUM Published 2021-09-08 Modified 2021-06-25 Official page ↗
Aliases
CVE-2021-32713
Ecosystem
Packagist
Packages
shopware/shopware
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-79
Reviewed
2021-06-25

Affected packages

• Packagist shopware/shopware: < 5.6.10 → fixed in 5.6.10

Description

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 suffer from an authenticated stored XSS in administration vulnerability. Users are recommend to update to the version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview.

Related

Alias · CVE (1)

  • CVE-2021-32713 Shopware is an open source eCommerce platform. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References