Skip to content
OpenAdvisories

Package · Packagist

oro/platform

6 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 6.1
    GHSA-3vhm-q4w3-rw8q

    OroPlatform Forced Redirect to External Website

    OroPlatform is prone to open redirection which could allow attackers to redirect users to external website.

    oro/platform Packagist
  • Medium 4.3
    CVE-2023-45824

    OroPlatform's pinned entity creation form shows pages of other users

    OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pageId hash. This vulnerability is fixed in 5.1.4.

    oroinc platform oro/platform Packagist
  • Medium 6.9
    GHSA-rrgw-3hg3-9x8c

    XSS vulnerability in translations

    ### Summary An attacker with admin privileges and access to Translations management functionality may add JS payload to translation values via: - Translation management UI. - Translations downloaded via the Crowdin service may also contain JS strings used for…

    oro/platform Packagist
  • Medium 6.9
    CVE-2021-41236

    XSS vulnerability in oro/platform

    OroPlatform is a PHP Business Application Platform. In affected versions the email template preview is vulnerable to XSS payload added to email template content. An attacker must have permission to create or edit an email template. For successful payload, exe…

    oroinc platform oro/platform Packagist