GitHub Advisoryadvisory · Packagist

GHSA-hrfh-fp4x-crrq Persistent XSS in newsletter module in Shopware

LOW Published 2020-11-13 Modified 2020-11-13 Official page ↗
Ecosystem
Packagist
Packages
shopware/shopware
Severity
Low
Weaknesses
CWE-79
Reviewed
2020-11-13

Affected packages

• Packagist shopware/shopware: < 5.6.9 → fixed in 5.6.9

Description

Impact Persistent XSS in newsletter module Patches We recommend updating to the current version 5.6.9. You can get the update to 5.6.9 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Security Plugin: https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html References https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-11-2020

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References