Skip to content

Non-persistent XSS in the Storefront in Shopware

Low severity GitHub Reviewed Published Sep 21, 2020 in shopware/shopware • Updated Jan 9, 2023

Package

composer shopware/core (Composer)

Affected versions

<= 6.3.1.0

Patched versions

6.3.1.1
composer shopware/platform (Composer)
<= 6.3.1.0
6.3.1.1

Description

Impact

Non-persistent XSS in the Storefront

Patches

We recommend to update to the current version 6.3.1.1. You can get the update to 6.3.1.1 regularly via the Auto-Updater or directly via the download overview.

For older versions you can use the Security Plugin:
https://store.shopware.com/en/detail/index/sArticle/518463/number/Swag136939272659

References

https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-09-2020

References

@shopwareBot shopwareBot published to shopware/shopware Sep 21, 2020
Reviewed Sep 23, 2020
Published to the GitHub Advisory Database Sep 23, 2020
Last updated Jan 9, 2023

Severity

Low

Weaknesses

CVE ID

No known CVE

GHSA ID

GHSA-qvhr-55hg-3qwv

Source code

Credits

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.