Packagist/shopware/core CVE-2021-37710: high 8, EPSS 0.74%

Cross-Site Scripting via SVG media files

Action: Upgrade shopware/core to 6.4.3.1 or later.

composer require shopware/core:6.4.3.1

Affected

Fixed versions

Sources

• osv: GHSA-fc38-mxwr-pfhx
• https://github.com/shopware/platform/security/advisories/GHSA-fc38-mxwr-pfhx
• https://nvd.nist.gov/vuln/detail/CVE-2021-37710
• https://github.com/shopware/platform/commit/abe9f69e1f667800f974acccd3047b4930e4b423
• https://github.com/shopware/platform

CVE-2021-37710 · published 2021-08-23T19:43:00Z · modified 2026-09-10T03:49:07.906639354Z · JSON