Lucene search
+L

1 matches found

osv_ghsa
osv_ghsa
•added 2026/03/11 12:13 a.m.•15 views

GHSA-MX4Q-XXC9-PF5Q Sylius Vulnerable to Authenticated Stored XSS

Impact An authenticated stored cross-site scripting XSS vulnerability exists in multiple places across the shop frontend and admin panel due to unsanitized entity names being rendered as raw HTML. Shop breadcrumbs shared/breadcrumbs.html.twig: The breadcrumbs macro uses the Twig |raw filter on...

4.8CVSS6.1AI score0.00251EPSS
SaveExploits0References3
Rows per page
Query Builder