social-auth-core Vulnerable to Account Takeover via Identity Binding Flaw in Vend Backend

Impact The Vend OAuth2 backend used only the numeric Vend userid as the social-auth UID. When multiple Vend shops authenticate through the same application, users from different shops with the same internal Vend user ID could collide in the social-auth association table. A user from one shop coul...

Shopware 5.2.5 & v5.3 - Multiple Cross Site Scripting Web Vulnerabilities

Exploit for php platform in category web applications Document Title: =============== Shopware 5.2.5 & v5.3 - Multiple Cross Site Scripting Web Vulnerabilities Security Update: http://community.shopware.com/Downloadscat448.html5.3.4 http://community.shopware.com/detail2035.html...