Skip to content
OpenAdvisories

Package · Packagist

shopware/storefront

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • High 7.1
    CVE-2025-67648

    Shopware's inproper input validation can lead to Reflected XSS through Storefront Login Page

    Shopware is an open commerce platform. Versions 6.4.6.0 through 6.6.10.9 and 6.7.0.0 through 6.7.5.0 have a Reflected XSS vulnerability in AuthController.php. A request parameter from the login page URL is directly rendered within the Twig template of the Sto…

    shopware shopware shopware/shopware shopware/storefront Packagist
  • High 7.5
    CVE-2024-27917

    Shopware's session is persistent in Cache for 404 pages

    Shopware is an open commerce platform based on Symfony Framework and Vue. The Symfony Session Handler pops the Session Cookie and assigns it to the Response. Since Shopware 6.5.8.0, the 404 pages are cached to improve the performance of 404 pages. So the cach…

    shopware shopware shopware/platform shopware/storefront Packagist