CVE-2019-12186

Summary: CVE-2019-12186 describes a Cross-Site Scripting (XSS) issue in Sylius grid rendering. The vulnerability stems from missing input sanitization in Sylius core components (sylius/sylius) and the grid bundle, allowing an attacker to inject malicious code via a field displayed in a grid with ...