PT-2021-24415 · Shopware · Shopware
Published
2021-05-21
·
Updated
2021-05-21
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Name of the Vulnerable Software and Affected Versions:
Shopware versions prior to 5.6.10
Description:
The issue is related to an Authenticated Stored XSS in the administration panel. There is no information provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.
Recommendations:
For versions prior to 5.6.10, update to version 5.6.10 using the Auto-Updater or by downloading it directly.
For older versions, consider using the Security Plugin as a temporary mitigation measure until the update to 5.6.10 can be applied.
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Shopware