Lucene search
+L

1 matches found

OSV
OSV
added 2024/05/10 3:33 p.m.50 views

GHSA-7PRJ-9CCR-HR3Q Sylius has potential Cross Site Scripting vulnerability via the "Province" field in the Checkout and Address Book

Impact There is a possibility to save XSS code in province field in the Checkout and Address Book and then execute it on these pages. The problem occurs when you open the address step page in the checkout or edit the address in the address book. This only affects the base UI Shop provided by...

6.4CVSS6.7AI score0.00417EPSS
SaveExploits1References5
Rows per page
Query Builder