Security
فارسی
All products

shopware/shopware

Composer · Package
34 reports
Vulnerability alerts
Follow
ReportProductEcosystemSeverityFix statusLast updated
Shopware Storefront Reflected XSS in Storefront Login PageCVE-2025-67648 · GHSA-6W82-V552-WJW2 shopware/shopwareshopware/storefront Composer High Fix reported
Exposure of .env if project root is configured as web root in shopware/productionGHSA-3PCR-4982-548M shopware/productionshopware/shopware Composer Medium Fix reported
Authenticated Stored XSS in shopware/shopwareCVE-2021-41188 · GHSA-4P3X-8QW9-24W9 shopware/shopware Composer Medium Fix reported
Information leakage in Error HandlerGHSA-9VXV-WPV4-F52P · PKSA-NX3V-6WZC-5K1DVersion ranges need review. shopware/shopware Composer Medium Fix reported
Authenticated Stored XSS in AdministrationGHSA-F6P7-8XFW-FJQQ · PKSA-CBT4-WJ1H-X6NKVersion ranges need review. shopware/shopware Composer Medium Fix reported
Cross-site scriptingCVE-2021-32713 · GHSA-7VMW-7X57-Q6JW shopware/shopware Composer Medium Fix reported
Exposure of Sensitive Information to an Unauthorized ActorCVE-2021-32712 · GHSA-QWPP-FGRJ-H78Q shopware/shopware Composer Medium Fix reported
Shopware Has Improper Control of Generation of Code in Twig rendered viewsCVE-2026-23498 · GHSA-7CW6-7H3H-V8PF shopware/coreshopware/shopware Composer High Fix reported
Shopware: Reflective Cross Site-Scripting (XSS) in CMS componentsGHSA-9V82-VCJX-M76J shopware/coreshopware/shopware Composer High Fix reported
Shopware vulnerable to cross-site scripting (XSS)CVE-2022-48150 · GHSA-MJ9R-FPV3-RGFX shopware/shopware Composer Medium No fix reported
Shopware Remote Code Execution VulnerabilityGHSA-7336-GHHP-F2QJ shopware/shopware Composer Critical Fix reported
Shopware Remote Code Execution VulnerabilityGHSA-Q3G4-2VW9-XV27 shopware/shopware Composer Critical Fix reported
Shopware Remote Code Execution VulnerabilityGHSA-83JV-4PRM-34G7 shopware/shopware Composer Critical Fix reported
Shopware Non-Persistent XSS in the FrontendGHSA-JQR7-5H7R-CH8P shopware/shopware Composer Medium Fix reported
Persistent XSS in shopping worldsGHSA-28FW-88HQ-6JMM · PKSA-PSHR-XJBX-JHW6Version ranges need review. shopware/shopware Composer Low Fix reported
Persistent XSS in newsletter module in ShopwareGHSA-HRFH-FP4X-CRRQ · PKSA-HDVN-86GG-45CWVersion ranges need review. shopware/shopware Composer Low Fix reported
Persistent XSS in customer module in ShopwareGHSA-6GV9-7Q4G-PMVM shopware/shopware Composer Low Fix reported
Shopware XSS VulnerabilityCVE-2017-15374 · GHSA-MVRX-CMQW-2JGJ shopware/shopware Composer Medium No fix reported
Shopware XXE VulnerabilityCVE-2017-18357 · GHSA-6M27-7CQJ-2MXW shopware/shopware Composer Medium Fix reported
Shopware Cross-site Scripting VulnerabilityCVE-2019-12935 · GHSA-8QXH-HCR9-2379 shopware/shopware Composer Medium Fix reported