Persistent XSS in newsletter module in Shopware

概要

参考情報

• shopware/shopware security advisory · WEB
• docs.shopware.com/en/shopware-5-en/security-updates/security-update-11-2020 · WEB

shopware/shopware のその他の脆弱性

• CVE-2026-23498高 7.2Shopware is an open commerce platform. From 6.7.0.0 to before 6.7.6.1, a regression of CVE-2023-2017 leads to an array and array crafted PHP…
• CVE-2025-67648中 6.1Shopware is an open commerce platform. Versions 6.4.6.0 through 6.6.10.9 and 6.7.0.0 through 6.7.5.0 have a Reflected XSS vulnerability in A…
• GHSA-9v82-vcjx-m76j高 8.8Shopware: Reflective Cross Site-Scripting (XSS) in CMS components
• GHSA-83jv-4prm-34g7緊急 9.8Shopware Remote Code Execution Vulnerability
• GHSA-7336-ghhp-f2qj緊急 9.8Shopware Remote Code Execution Vulnerability