Tóm tắt nhanh
- CVE-2026-29177 là lỗ hổng mức TRUNG BÌNH (CVSS 5.4) ảnh hưởng craftcms/commerce, craft commerce (craftcms).
- Xác suất bị khai thác trong 30 ngày tới (EPSS): 0.22%, cao hơn 13.1% các lỗ hổng khác.
- Cách xử lý: cập nhật lên 4.10.2, 5.5.3 hoặc mới hơn.
| Gói / sản phẩm | Phiên bản bị ảnh hưởng | Phiên bản đã vá |
|---|
| craftcms/commerce Packagist | ≥ 4.0.0, < 4.10.2≥ 5.0.0, < 5.5.3
| 4.10.25.5.3
|
| craft commerce | ≥ 4.0.0, < 4.10.2≥ 5.0.0, < 5.5.3
| 4.10.25.5.3
|
Mô tả
Summary
A Stored Cross-Site Scripting (XSS) vulnerability exists in the Craft Commerce Order details. Malicious JavaScript can be injected via the Shipping Method Name, Order Reference, or Site Name. When a user opens the order details slideout via a double-click on the order index page, the injected payload executes.
Reproduction Steps
- Navigate to Commerce -> Store Management -> Shipping Methods.
- Click "New Shipping Method".
- In the Name field, enter the following XSS payload:
<img src=x onerror=alert('XSS_Shipping')>
- Save the Shipping Method.
- Place a new order or edit an existing order.
- Set the order's Shipping Method to the one created in the previous steps.
- Navigate to the Orders index page (
/admin/commerce/orders).
- Double-click the target order to open the details slideout.
- Result: The XSS payload executes.
Mô tả của NVD
Craft Commerce is an ecommerce platform for Craft CMS. Prior to 4.10.2 and 5.5.3, a Stored Cross-Site Scripting (XSS) vulnerability exists in the Craft Commerce Order details. Malicious JavaScript can be injected via the Shipping Method Name, Order Reference, or Site Name. When a user opens the order details slideout via a double-click on the order index page, the injected payload executes. This vulnerability is fixed in 4.10.2 and 5.5.3.
Bạn đang dùng một trong các sản phẩm này? Quét site để biết có đang lộ phiên bản có lỗ hổng không.
Quét site miễn phí