Filtered by vendor Vendure
Subscriptions
Filtered by product Vendure
Subscriptions
Total
1 CVE
CVE | Vendors | Products | Updated | CVSS v3.1 |
---|---|---|---|---|
CVE-2022-23065 | 1 Vendure | 1 Vendure | 2022-05-10 | 5.4 Medium |
In Vendure versions 0.1.0-alpha.2 to 1.5.1 are affected by Stored XSS vulnerability, where an attacker having catalog permission can upload a SVG file that contains malicious JavaScript into the “Assets” tab. The uploaded file will affect administrators as well as regular users. |
Page 1 of 1.