GitHub Advisoryadvisory · Packagist

GHSA-f6p7-8xfw-fjqq Authenticated Stored XSS in Administration

MEDIUM Published 2021-05-21 Modified 2021-05-18 Official page ↗
Ecosystem
Packagist
Packages
shopware/shopware
Severity
Moderate
Weaknesses
CWE-79
Reviewed
2021-05-18

Affected packages

• Packagist shopware/shopware: < 5.6.10 → fixed in 5.6.10

Description

Impact Authenticated Stored XSS in Administration Patches We recommend updating to the current version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Security Plugin: https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html References https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-05-2021

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References