CVE-2019-12935: Improper Neutralization of Input During Web Page Generation

Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI...