OroCommerce vulnerable to XSS when adding class name to Selector Manager on pages that use GrapeJS editor

2022-07-1519:25:06

CWE-79

GitHub Advisory Database

github.com

orocommerce

xss

vulnerability

grapejs

selector manager

executable js code

class name validation

patch

dependency

v0.19.5

Impact

Due to insufficient class name validation in GrapeJS library it’s possible to add executable JS code in class name through Selector Manager

Update GrapeJS dependency to >=v0.19.5

Vulners

Node

orocommerceRange5.0–5.0.4

VendorProductVersionCPE
orocommerce*cpe:2.3:a:oro:commerce:*:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
oro	commerce	*	cpe:2.3:a:oro:commerce::::::::

github.com/advisories/GHSA-6f85-3f8q-qc94

github.com/artf/grapesjs/issues/4411

github.com/oroinc/orocommerce/security/advisories/GHSA-6f85-3f8q-qc94