Junglewise Threat Intelligence

Duplicate Advisory: Sylius Cross Site Scripting (XSS) vulnerability

Severity: low · CVSS 3.1 · Published 2024-04-22

Technologies: sylius/sylius (Packagist). Vendors: Packagist.

Executive brief

Duplicate Advisory: Sylius Cross Site Scripting (XSS) vulnerability

Affected products

Packagist sylius/sylius

Related threats

Withdrawn Advisory: Sylius allows unrestricted brute-force attacks on user accounts
List of order ids, number, items total and token value exposed for unauthorized uses via new API