Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2026/03/11 12:13 a.m.11 views

Sylius Vulnerable to Authenticated Stored XSS

Impact An authenticated stored cross-site scripting XSS vulnerability exists in multiple places across the shop frontend and admin panel due to unsanitized entity names being rendered as raw HTML. Shop breadcrumbs shared/breadcrumbs.html.twig: The breadcrumbs macro uses the Twig |raw filter on...

4.8CVSS5.9AI score0.00142EPSS
SaveExploits0References3Affected Software1
Rows per page
Query Builder