Lucene search
Veracode Vulnerability DatabaseVERACODE:34690HistoryMar 15, 2022 - 9:40 a.m.
Cross-site Scripting (XSS)
2022-03-1509:40:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
21
sylius
cross-site scripting
svg
javascript
vulnerability
EPSS
0.001
Percentile
41.3%
sylius/sylius is vulnerable to cross-site scripting(XSS) attacks. An attacker is able to inject and execute malicious javascript via a specifically crafted SVG file.
References
github.com/Sylius/Sylius/commit/46ed54bb0b7dae44e53d429a3edd68f5506c47a0
github.com/Sylius/Sylius/pull/13765
github.com/Sylius/Sylius/releases/tag/v1.10.11
github.com/Sylius/Sylius/releases/tag/v1.11.2
github.com/Sylius/Sylius/releases/tag/v1.9.10
github.com/Sylius/Sylius/security/advisories/GHSA-4qrp-27r3-66fj
Related
cnvd
cnvd
Sylius Cross-Site Scripting Vulnerability (CNVD-2022-20526)
2022-03-15 00:00:00
osv
osv
CVE-2022-24749
2022-03-14 22:15:07
github
github
nvd
nvd
CVE-2022-24749
2022-03-14 22:15:07
gitlab
gitlab
prion
prion
Cross site scripting
2022-03-14 22:15:00
cvelist
cvelist
cve
cve
CVE-2022-24749
2022-03-14 22:15:07