oro/commerce
Composer · Package
Vulnerability alerts
Follow| Report | Product | Ecosystem | Severity | Fix status | Last updated |
|---|---|---|---|---|---|
| OroCommerce vulnerable to XSS when adding class name to Selector Manager on pages that use GrapeJS editor | oro/commerce | Composer | Medium | Fix reported | |
| OroCommerce Cross-site Scripting vulnerability in add note dialog of Shopping List line item | oro/commerce | Composer | Medium | Fix reported | |
| OroCommerce get-totals-for-checkout API endpoint returns unwanted data | oro/commerce | Composer | Medium | Fix reported | |
| OroCommerce Cross site scripting vulnerability during shipping rule editing for UPS integration | oro/commerce | Composer | Medium | Fix reported |