Skip to content
OpenAdvisories

Package · Packagist

shopware/shopware

34 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Low 3.5
    CVE-2022-21652

    Insufficient Session Expiration in shopware

    Shopware is an open source e-commerce software platform. In affected versions shopware would not invalidate a user session in the event of a password change. With version 5.7.7 the session validation was adjusted, so that sessions created prior to the latest …

    shopware shopware shopware/shopware Packagist
  • Low —
    GHSA-hrfh-fp4x-crrq

    Persistent XSS in newsletter module in Shopware

    ### Impact Persistent XSS in newsletter module ### Patches We recommend updating to the current version 5.6.9. You can get the update to 5.6.9 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Security Pl…

    shopware/shopware Packagist
  • Low —
    GHSA-28fw-88hq-6jmm

    Persistent XSS in shopping worlds

    ### Impact Persistent XSS in shopping worlds ### Patches We recommend updating to the current version 5.6.9. You can get the update to 5.6.9 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Security Plug…

    shopware/shopware Packagist
  • Low —
    GHSA-6gv9-7q4g-pmvm

    Persistent XSS in customer module in Shopware

    ### Impact Persistent XSS in customer module ### Patches We recommend updating to the current version 5.6.9. You can get the update to 5.6.9 regularly via the Auto-Updater or directly via the download overview. For older versions you can use the Security Plug…

    shopware/shopware Packagist