Skip to content
OpenAdvisories
Medium · 6.5 CVE-2022-31057 EUVD-2022-6128GHSA-q754-vwc4-p6qj

Authenticated Stored XSS in Shopware Administration

Published Jun 27, 2022 · Updated Apr 23, 2025 · Assigned by GitHub_M

Description

Shopware is an open source e-commerce software made in Germany. Versions of Shopware 5 prior to version 5.7.12 are subject to an authenticated Stored XSS in Administration. Users are advised to upgrade. There are no known workarounds for this issue.

Affected products

VendorProductAffectedFixed
shopware shopware < 5.7.12 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist shopware/shopware < 5.7.12 5.7.12 GHSA-q754-vwc4-p6qj

References