What is GHSA-6gv9-7q4g-pmvm?

GHSA-6gv9-7q4g-pmvm is a security advisory published by GitHub Security Advisories with Low severity. Persistent XSS in customer module in Shopware

Why does GHSA-6gv9-7q4g-pmvm have no CVE ID yet?

GitHub Security Advisories published this advisory directly to customers before NVD assigned a CVE ID. This is the embargo-window disclosure pattern — vendors notify customers on day 0; NVD's public record follows days to weeks later.

Which products are affected by GHSA-6gv9-7q4g-pmvm?

GHSA-6gv9-7q4g-pmvm affects 1 product, including: composer/shopware/shopware:\u003c 5.6.9.

GHSA-6gv9-7q4g-pmvmLowDisclosed before NVD

Persistent XSS in customer module in Shopware

Vendor

GitHub Security Advisories

Published

November 13, 2020

Last Modified

January 9, 2023

📋 Description

Impact

Persistent XSS in customer module

Patches

We recommend updating to the current version 5.6.9. You can get the update to 5.6.9 regularly via the Auto-Updater or directly via the download overview.

For older versions you can use the Security Plugin: https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html

References

https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-11-2020

🎯 Affected products1

composer/shopware/shopware:< 5.6.9

🔗 References (3)

https://github.com/shopware/shopware/security/advisories/GHSA-6gv9-7q4g-pmvm
https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-11-2020
https://github.com/advisories/GHSA-6gv9-7q4g-pmvm