CVE-2024-29376

2024-04-2200:00:00

mitre

github.com

sylius address book cross site scripting

AI Score

5.9

Confidence

High

SSVC

Exploitation

poc

Automatable

Technical Impact

partial

JSON

Sylius 1.12.13 is vulnerable to Cross Site Scripting (XSS) via the “Province” field in Address Book.

ADP Affected

[
  {
    "cpes": [
      "cpe:2.3:a:sylius:sylius:*:*:*:*:*:*:*:*"
    ],
    "vendor": "sylius",
    "product": "sylius",
    "versions": [
      {
        "status": "affected",
        "version": "1.12.13"
      }
    ],
    "defaultStatus": "unknown"
  }
]