GHSA-7vmw-7x57-q6jw

Cross-site scripting

Source: GitHub Advisory Database (reviewed) Moderate CVE-2021-32713

Packages

Ecosystem	Package	Affected	Fixed in
Packagist	shopware/shopware	< 5.6.10	5.6.10

Details

As written in the advisory (Markdown source, shown as plain text).

Shopware is an open source eCommerce platform. Versions prior to 5.6.10 suffer from an authenticated stored XSS in administration vulnerability. Users are recommend to update to the version 5.6.10. You can get the update to 5.6.10 regularly via the Auto-Updater or directly via the download overview.

References

External links from the advisory. They lead to third-party sites.

https://github.com/shopware/shopware/security/advisories/GHSA-f6p7-8xfw-fjqq web
https://nvd.nist.gov/vuln/detail/CVE-2021-32713 advisory
https://github.com/shopware/shopware/commit/a0850ffbc6f581a8eb8425cc2bf77a0715e21e12 web
https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-05-2021 web