Shopware Cross-site Scripting Vulnerability

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2019-12935 · ADVISORY
• netsparker.com/web-applications-advisories/ns-19-004-cross-site-scripting-in-shopware · WEB
• shopware.com/en/changelog · WEB
• seclists.org/fulldisclosure/2019/Jun/32 · WEB
• packetstormsecurity.com/files/153145/Shopware-5.5.6-Cross-Site-Scripting.html
• netsparker.com/web-applications-advisories/ns-19-004-cross-site-scripting-in-shopware · Exploit

shopware/shopware のその他の脆弱性

• CVE-2026-23498高 7.2Shopware is an open commerce platform. From 6.7.0.0 to before 6.7.6.1, a regression of CVE-2023-2017 leads to an array and array crafted PHP…
• CVE-2025-67648中 6.1Shopware is an open commerce platform. Versions 6.4.6.0 through 6.6.10.9 and 6.7.0.0 through 6.7.5.0 have a Reflected XSS vulnerability in A…
• GHSA-9v82-vcjx-m76j高 8.8Shopware: Reflective Cross Site-Scripting (XSS) in CMS components
• GHSA-83jv-4prm-34g7緊急 9.8Shopware Remote Code Execution Vulnerability
• GHSA-7336-ghhp-f2qj緊急 9.8Shopware Remote Code Execution Vulnerability