Lucene search
+L

1 matches found

CNVD
CNVD
added 2022/05/07 12:0 a.m.26 views

Vendure Cross-Site Scripting Vulnerability

Vendure is a headless GraphQL eCommerce framework based on Node.js and Nest & TypeScript, focused on developer productivity and easy customization. version 0.1.0-alpha.2 to 1.5.1 of Vendure is vulnerable to a cross-site scripting vulnerability that stems from the program's lack of data validation...

3.5CVSS0.6AI score0.00606EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder