Patchwire CVEs, their patch status, and feeds to follow them

CVE-2022-31057

Fixed upstream EPSS <1%CVSS 6.5

Shopware is an open source e-commerce software made in Germany. Versions of Shopware 5 prior to version 5.7.12 are subject to an authenticated Stored XSS in Administration. Users are advised to upgrade. There are no known workarounds for this issue.

Published 2022-06-27 · CVE record · OSV

Products: shopware

Fixed upstream

EcosystemPackageFixed in
Packagistshopware/shopware5.7.12