Skip to content
OpenAdvisories

Package · Maven

org.broadleafcommerce:broadleaf

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • Medium 6.1
    CVE-2023-33725

    Broadleaf vulnerable to Cross-site Scripting

    Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was discovered to contain a cross-site scripting (XSS) vulnerability via a customer signup with a crafted email address. This is fixed in 6.2.6.1-GA.

    org.broadleafcommerce:broadleaf Maven