Skip to content
OpenAdvisories

Package · npm

@vendure/admin-ui-plugin

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium —

    @vendure/admin-ui-plugin authenticated Cross-site Scripting vulnerability

    ### Impact Vendure provides an authorization system with different levels of privileges. For example, an administrator cannot create another administrator. In the admin UI, there are a couple of places with description inputs, such as inventory/collection cat…