Description
Shopware is an open source e-commerce software platform. Prior to version 5.7.9, Shopware is vulnerable to non-stored cross-site scripting in the storefront. This issue is fixed in version 5.7.9. Users of older versions may attempt to mitigate the vulnerability by using the Shopware security plugin.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| shopware | shopware | < 5.7.9 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | shopware/shopware | < 5.7.9 | 5.7.9 | GHSA-4g29-fccr-p59w |