Skip to content

Persistent XSS in customer module

Moderate
mitelg published GHSA-5834-xv5q-cgfw Jul 25, 2022

Package

composer shopware/shopware (Composer)

Affected versions

>=5.7.0 <=5.7.13

Patched versions

5.7.14

Description

Impact

Persistent XSS in customer module

Patches

We recommend updating to the current version 5.7.14. You can get the update to 5.7.14 regularly via the Auto-Updater or directly via the download overview.

For older versions you can use the Security Plugin:
https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html

References

https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-07-2022

Severity

Moderate

CVE ID

CVE-2022-31148

Weaknesses

No CWEs