Shopware Cross-Site Scripting Vulnerability (CNVD-2022-58390)

Shopware is a set of open source e-commerce software from the German company Shopware.A cross-site scripting vulnerability exists in versions of Shopware prior to 5.7.12, which stems from a lack of data validation filtering of user-supplied and output data during login authentication. An attacker could exploit the vulnerability to execute JavaScript code on the client side.