Skip to content
Oroinc Platform vulnerabilities
-
oroinc oroplatform, orocommerce +1 more
A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute...
CVE-2024-50677
Public exploit
6.1 Medium
-
oroinc oroplatform, orocommerce +1 more
OroPlatform's storefront user can access history and most viewed data from matching back-office user with the same ID
CVE-2023-48296
Fix available
4.3 Medium
-
oroinc oroplatform, platform +1 more
OroPlatform's pinned entity creation form shows pages of other users
CVE-2023-45824
Fix available
4.3 Medium
-
oroinc oroplatform, churchcrm crm +1 more
OroCalendarBundle has incorrect system calendar events visibility
CVE-2023-32062
Fix available
5.0 Medium
-
oroinc oroplatform, platform +1 more
OroPlatform vulnerable to path traversal during temporary file manipulations
CVE-2022-41951
Fix available
8.6 High
-
oroinc oroplatform, platform +1 more
JavaScript Prototype Pollution in oro/platform
CVE-2021-43852
Fix available
8.8 High
-
oroinc oroplatform, platform +1 more
XSS vulnerability in oro/platform
CVE-2021-41236
Fix available
6.9 Medium