WS-2021-0464

The “vc-platformVirtoCommerce” application versions v2.1 to v3.79.0 is affected by a stored XSS vulnerability via SVG file upload in the Asset Upload feature. This allows low privileged application users to store malicious scripts in the uploaded file. These scripts are executed in a victim’s...