Approved changes feed: RSS · Atom

cpe:2.3:a:sylius:sylius:1.12.13:*:*:*:*:*:*:*

part: a version: 1.12.13 update: *

VendorSylius (09c994bc-1943-5531-ab63-45ba7c30d733)
ProductSylius (d567aa98-f92e-58b6-bd8f-1473e63c5d90)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/sylius/sylius purl2cpe 2026-06-01 10:11:40.832261
pkg:sourceforge/sylius.mirror purl2cpe 2026-06-01 10:11:40.832263

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-29376 vulnerable 2026-06-08 06:33:29.124838 Details available
Sylius 1.12.13 is vulnerable to Cross Site Scripting (XSS) via the "Province" field in Address Book.
Published: 2024-04-22T00:00:00.000Z
Updated: 2024-11-22T14:28:29.018Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.