Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2022-48150
6.1
MEDIUMCVSS v3
Published
April 21, 2023
Affected
3 projects
Assigned by
MITRE
Severity scale
010
Description
Shopware v5.5.10 was discovered to contain a cross-site scripting (XSS) vulnerability via the recovery/install/ URI.
shopware/shopware
GitHubShopware 6 is an open commerce platform based on Symfony Framework and Vue and supported by a worldwide community and more than 3.100 community extensions
GitHubShopware 6 is an open commerce platform based on Symfony Framework and Vue and supported by a worldwide community and more than 3.100 community extensions= 5.5.10NVD
shopware/shopware
PackagistShopware 5 is an open source e-commerce software made in Germany
PackagistShopware 5 is an open source e-commerce software made in Germany= 5.5.10NVD