Packagist/shopware/storefront CVE-2022-24746: medium 6.1, EPSS 0.84%

HTML injection possibility in voucher code form in Shopware

Action: Upgrade shopware/storefront to 6.4.8.1 or later.

composer require shopware/storefront:6.4.8.1

Affected

Fixed versions

Sources

• osv: GHSA-952p-fqcp-g8pc#Packagist/shopware/storefront
• https://github.com/shopware/platform/security/advisories/GHSA-952p-fqcp-g8pc
• https://nvd.nist.gov/vuln/detail/CVE-2022-24746
• https://github.com/shopware/platform/commit/651598a61073cbe59368e311817bdc6e7fb349c6
• https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-02-2022
• https://docs.shopware.com/en/shopware-6-en/security-updates/security-update-02-2022?category=security-updates
• https://github.com/shopware/platform

CVE-2022-24746 · published 2022-03-10T17:49:26Z · modified 2023-11-08T04:08:34.941165Z · JSON