1 matches found
Sylius Vulnerable to Authenticated Stored XSS
Impact An authenticated stored cross-site scripting XSS vulnerability exists in multiple places across the shop frontend and admin panel due to unsanitized entity names being rendered as raw HTML. Shop breadcrumbs shared/breadcrumbs.html.twig: The breadcrumbs macro uses the Twig |raw filter on...
4.8CVSS5.9AI score0.00142EPSS
SaveExploits0References3Affected Software1
20