Cross-site Scripting (XSS)

oro/platform is vulnerable to cross-site scripting. The vulnerability exists due to the lack of sanitization in the translations management function which allows an attacker to inject javascript payload via the Upload translation file...

PT-2022-28278

Name of the Vulnerable Software and Affected Versions No specific software or versions are mentioned, so the information cannot be provided. Description The issue allows an attacker with admin privileges and access to Translations management functionality to add a JS payload to translation values...