Lucene search
China National Vulnerability DatabaseCNVD-2022-18526HistoryMar 11, 2022 - 12:00 a.m.
Shopware Cross-Site Scripting Vulnerability (CNVD-2022-18526)
2022-03-1100:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
0.001 Low
EPSS
Percentile
30.8%
Shopware is a set of open source e-commerce software from the German company Shopware.Shopware suffers from a cross-site scripting vulnerability that stems from the program’s lack of data validation filtering of user-supplied and output data. An attacker could exploit this vulnerability to inject JavaScript code via the credential code form.
| CPE | Name | Operator | Version |
|---|---|---|---|
| Shopware Shopware <6. | eq | 4.8.1 |
Related
nvd
nvd
CVE-2022-24746
2022-03-09 23:15:08
osv
osv
CVE-2022-24746
2022-03-09 23:15:08
HTML injection possibility in voucher code form in Shopware
2022-03-10 17:49:26
cvelist
cvelist
CVE-2022-24746 HTML injection possibility in voucher code form
2022-03-09 22:25:23
cve
cve
CVE-2022-24746
2022-03-09 23:15:08
prion
prion
Code injection
2022-03-09 23:15:00
veracode
veracode
Cross-site Scripting (XSS)
2022-03-10 05:06:19
github
github
HTML injection possibility in voucher code form in Shopware
2022-03-10 17:49:26