Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2025/12/10 11:55 p.m.35 views

CVE-2025-67648 Shopware's inproper input validation can lead to Reflected XSS through Storefront Login Page

Shopware is an open commerce platform. Versions 6.4.6.0 through 6.6.10.9 and 6.7.0.0 through 6.7.5.0 have a Reflected XSS vulnerability in AuthController.php. A request parameter from the login page URL is directly rendered within the Twig template of the Storefront login page without further...

7.1CVSS0.00161EPSS
SaveExploits0References2
Rows per page
Query Builder