shopware/storefront vulnerabilities (Packagist)
5 vulnerabilities.
-
shopware/storefrontPackagist Shopware's inproper input validation can lead to Reflected XSS through Storefront Login Page 7.1 High -
shopware/storefrontPackagist Shopware's session is persistent in Cache for 404 pages 7.5 High -
shopware/storefrontPackagist Guest session is shared between customers in shopware 4.8 Medium -
shopware/storefrontPackagist HTML injection possibility in voucher code form 6.1 Medium -
shopware/storefrontPackagist HTTP caching is marking private HTTP headers as public 6.3 Medium