Skip to content
OpenAdvisories

Package · Packagist

sylius/grid-bundle

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • Critical 9.8
    CVE-2022-24752

    SQL Injection through sorting parameters in SyliusGridBundle

    SyliusGridBundle is a package of generic data grids for Symfony applications. Prior to versions 1.10.1 and 1.11-rc2, values added at the end of query sorting were passed directly to the database. The maintainers do not know if this could lead to direct SQL in…

    Sylius SyliusGridBundle sylius/grid-bundle Packagist
  • Medium 4.8
    CVE-2019-12186

    XSS injection in the Grid component of Sylius

    An issue was discovered in Sylius products. Missing input sanitization in sylius/sylius 1.0.x through 1.0.18, 1.1.x through 1.1.17, 1.2.x through 1.2.16, 1.3.x through 1.3.11, and 1.4.x through 1.4.3 and sylius/grid 1.0.x through 1.0.18, 1.1.x through 1.1.18,…

    sylius/sylius sylius/grid-bundle sylius/grid Packagist