Lucene search
China National Vulnerability DatabaseCNVD-2022-20526HistoryMar 15, 2022 - 12:00 a.m.
Sylius Cross-Site Scripting Vulnerability (CNVD-2022-20526)
2022-03-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
sylius
e-commerce
xss
vulnerability
administration panel
svg
phishing
cookies
EPSS
0.001
Percentile
41.3%
Sylius is an open source e-commerce platform. Sylius suffers from a cross-site scripting vulnerability that could be exploited by attackers to upload SVG files containing XSS code in the administration panel to obtain user cookies and construct phishing attacks.
Related
osv
osv
CVE-2022-24749
2022-03-14 22:15:07
github
github
veracode
veracode
Cross-site Scripting (XSS)
2022-03-15 09:40:36
nvd
nvd
CVE-2022-24749
2022-03-14 22:15:07
gitlab
gitlab
prion
prion
Cross site scripting
2022-03-14 22:15:00
cvelist
cvelist
cve
cve
CVE-2022-24749
2022-03-14 22:15:07