Approved changes feed: RSS · Atom

cpe:2.3:a:umbraco:umbraco.commerce.issues:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorUmbraco (89be0333-81fe-5eb9-9281-55a77e50e27f)
ProductUmbraco.Commerce.Issues (699212e5-0646-527f-8ab6-f20f9be3e8d5)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-35240 vulnerable 2026-06-08 06:37:35.514351 Stored Cross-site Scripting on Print Functionality in Umbraco Commerce
MEDIUM (5.4)
Umbraco Commerce is an open source dotnet ecommerce solution. In affected versions there exists a stored Cross-site scripting (XSS) issue which would enable attackers to inject malicious code into Print Functionality. This issue has been addressed in versions 12.1.4, and 10.0.5. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Published: 2024-05-28T20:15:32.382Z
Updated: 2024-08-19T19:02:57.975Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.