Approved changes feed: RSS · Atom

cpe:2.3:a:oroinc:oroplatform:5.1.0:-:*:*:*:*:*:*

part: a version: 5.1.0 update: -

VendorOroinc (cecfbc26-91c1-5ac6-b9e0-e44c0304077b)
ProductOroplatform (3f56166f-2f29-5310-8227-a276206b5f59)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/oroinc/platform purl2cpe 2026-06-01 10:13:24.927612

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-50677 vulnerable 2026-06-08 06:52:11.386345 Details available
A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Search parameter.
Published: 2024-12-06T00:00:00.000Z
Updated: 2024-12-06T16:44:57.615Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.