Approved changes feed: RSS · Atom

cpe:2.3:a:sylius:sylius/sylius:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorSylius (09c994bc-1943-5531-ab63-45ba7c30d733)
ProductSylius/Sylius (35d7cf93-c6ac-567a-9af6-169d75540ef6)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-3841 vulnerable 2026-06-08 05:33:54.416135 Stored Cross-site Scripting (XSS) in sylius/sylius
MEDIUM (4.1)
sylius/sylius versions prior to 1.9.10, 1.10.11, and 1.11.2 are vulnerable to stored cross-site scripting (XSS) through SVG files. This vulnerability allows attackers to inject malicious scripts that can be executed in the context of the user's browser.
Published: 2024-11-15T10:52:01.371Z
Updated: 2024-11-20T22:36:05.302Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.