-CVE-2022-48150

-CVE-2022-48150 Я нашел уязвимость отраженного XSS в Shopware 5 .для получения дополнительной информации смотрите мое видео POC...

CVE-2022-31057

Shopware is an open source e-commerce software made in Germany. Versions of Shopware 5 prior to version 5.7.12 are subject to an authenticated Stored XSS in Administration. Users are advised to upgrade. There are no known workarounds for this issue...

Information leakage in Error Handler

Impact Information leakage in Error Handler Patches We recommend updating to the current version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Security Plugin:...