Lucene search
Veracode Vulnerability DatabaseVERACODE:34690HistoryMar 15, 2022 - 9:40 a.m.
Cross-site Scripting (XSS)
2022-03-1509:40:36
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
20
0.001 Low
EPSS
Percentile
41.3%
sylius/sylius is vulnerable to cross-site scripting(XSS) attacks. An attacker is able to inject and execute malicious javascript via a specifically crafted SVG file.
| CPE | Name | Operator | Version |
|---|---|---|---|
| sylius/sylius | le | v1.10.10 | |
| sylius/sylius | le | v1.11.1 | |
| sylius/sylius | le | v1.9.9 | |
| sylius/sylius | le | v1.10.10 | |
| sylius/sylius | le | v1.11.1 | |
| sylius/sylius | le | v1.9.9 |
References
github.com/Sylius/Sylius/commit/46ed54bb0b7dae44e53d429a3edd68f5506c47a0
github.com/Sylius/Sylius/pull/13765
github.com/Sylius/Sylius/releases/tag/v1.10.11
github.com/Sylius/Sylius/releases/tag/v1.11.2
github.com/Sylius/Sylius/releases/tag/v1.9.10
github.com/Sylius/Sylius/security/advisories/GHSA-4qrp-27r3-66fj
Related
cnvd
cnvd
Sylius Cross-Site Scripting Vulnerability (CNVD-2022-20526)
2022-03-15 00:00:00
osv
osv
CVE-2022-24749
2022-03-14 22:15:07
github
github
gitlab
gitlab
nvd
nvd
CVE-2022-24749
2022-03-14 22:15:07
cve
cve
CVE-2022-24749
2022-03-14 22:15:07
prion
prion
Cross site scripting
2022-03-14 22:15:00
cvelist
cvelist