Shopware Cross-Site Scripting Vulnerability (CNVD-2021-103572)

2021-10-2800:00:00

China National Vulnerability Database

www.cnvd.org.cn

0.001 Low

EPSS

Percentile

31.7%

JSON

Shopware is a suite of open source e-commerce software from the German company Shopware.Shopware in versions prior to 5.7.6 suffers from a cross-site scripting vulnerability that stems from the lack of proper validation of client-side data by the WEB application. An attacker could exploit the vulnerability to execute JavaScript code on the client side.

CPENameOperatorVersion
shopware shopwarelt5.7.6

CPE	Name	Operator	Version
	shopware shopware	lt	5.7.6

0.001 Low

EPSS

Percentile

31.7%

JSON

Related for CNVD-2021-103572