EUVD-2021-2156

🗓️ 07 Oct 2025 00:30:54Reported by EUVDType

Shopware versions before 5.7.6 have a cross-site scripting vulnerability, patched in 5.7.6.

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2021-41188	26 Oct 202118:15	–	circl
CNNVD	Shopware 跨站脚本漏洞	26 Oct 202100:00	–	cnnvd
CNVD	Shopware Cross-Site Scripting Vulnerability (CNVD-2021-103572)	28 Oct 202100:00	–	cnvd
CVE	CVE-2021-41188	26 Oct 202115:00	–	cve
Cvelist	CVE-2021-41188 Authenticated Stored XSS in Administration	26 Oct 202115:00	–	cvelist
Github Security Blog	Authenticated Stored XSS in shopware/shopware	27 Oct 202118:53	–	github
NVD	CVE-2021-41188	26 Oct 202115:15	–	nvd
OSV	GHSA-4P3X-8QW9-24W9 Authenticated Stored XSS in shopware/shopware	27 Oct 202118:53	–	osv
Prion	Cross site scripting	26 Oct 202115:15	–	prion
RedhatCVE	CVE-2021-41188	9 Jan 202609:21	–	redhatcve

[
  {
    "enisaIdVendor": [
      {
        "id": "fed4e473-09d2-342d-85e2-fb4673194d5f",
        "vendor": {
          "name": "shopware"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "a838e781-ed19-308c-b7bf-5b650ac3bf7e",
        "product": {
          "name": "shopware"
        },
        "product_version": "< 5.7.6"
      }
    ]
  }
]

Source	Link
github	www.github.com/shopware/shopware/security/advisories/GHSA-4p3x-8qw9-24w9
nvd	www.nvd.nist.gov/vuln/detail/CVE-2021-41188
github	www.github.com/shopware/shopware/commit/37213e91d525c95df262712cba80d1497e395a58
docs	www.docs.shopware.com/en/shopware-5-en/sicherheitsupdates/security-update-10-2021
github	www.github.com/shopware/shopware
github	www.github.com/shopware/shopware/releases/tag/v5.7.6
store	www.store.shopware.com/en/swag575294366635f/shopware-security-plugin.html
github	www.github.com/advisories/GHSA-293c-r3p4-g63r

07 Oct 2025 00:30Current

5.5Medium risk

Vulners AI Score5.5

CVSS 3.15.4 - 5.7

CVSS 23.5

EPSS0.00512