Skip to content
OpenAdvisories

Product · oroinc

platform

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2023-45824

    OroPlatform's pinned entity creation form shows pages of other users

    OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pageId hash. This vulnerability is fixed in 5.1.4.

    oroinc platform oro/platform Packagist
  • Medium 6.9
    CVE-2021-41236

    XSS vulnerability in oro/platform

    OroPlatform is a PHP Business Application Platform. In affected versions the email template preview is vulnerable to XSS payload added to email template content. An attacker must have permission to create or edit an email template. For successful payload, exe…

    oroinc platform oro/platform Packagist