Lucene search
China National Vulnerability DatabaseCNVD-2022-20526HistoryMar 15, 2022 - 12:00 a.m.
Sylius Cross-Site Scripting Vulnerability (CNVD-2022-20526)
2022-03-1500:00:00
China National Vulnerability Database
www.cnvd.org.cn
9
0.001 Low
EPSS
Percentile
41.3%
Sylius is an open source e-commerce platform. Sylius suffers from a cross-site scripting vulnerability that could be exploited by attackers to upload SVG files containing XSS code in the administration panel to obtain user cookies and construct phishing attacks.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sylius sylius | lt | 1.9.10 | |
| sylius sylius | lt | 1.10.11 | |
| sylius sylius | lt | 1.11.2 |
Related
osv
osv
CVE-2022-24749
2022-03-14 22:15:07
github
github
gitlab
gitlab
nvd
nvd
CVE-2022-24749
2022-03-14 22:15:07
veracode
veracode
Cross-site Scripting (XSS)
2022-03-15 09:40:36
cve
cve
CVE-2022-24749
2022-03-14 22:15:07
prion
prion
Cross site scripting
2022-03-14 22:15:00
cvelist
cvelist