CVE-2021-41188 Authenticated Stored XSS in Administration

Shopware is open source e-commerce software. Versions prior to 5.7.6 contain a cross-site scripting vulnerability. This issue is patched in version 5.7.6. Two workarounds are available. Using the security plugin or adding a particular following config to the .htaccess file will protect against...

CVE-2021-41188

CVE-2021-41188 affects Shopware Open Source before version 5.7.6, which contains a cross-site scripting vulnerability. The issue is mitigated by upgrading to 5.7.6; workarounds include enabling the Security Plugin or applying specific configurations in .htaccess (for Apache) or nginx server block...