by @mweinelt Activity log
- Created automatic suggestion
-
@mweinelt
removed
8 packages
- python312Packages.azure-mgmt-commerce
- python313Packages.azure-mgmt-commerce
- python314Packages.azure-mgmt-commerce
- python312Packages.mypy-boto3-marketplacecommerceanalytics
- python313Packages.mypy-boto3-marketplacecommerceanalytics
- python314Packages.mypy-boto3-marketplacecommerceanalytics
- python312Packages.types-aiobotocore-marketplacecommerceanalytics
- python313Packages.types-aiobotocore-marketplacecommerceanalytics
- @mweinelt dismissed
Multiple Stored XSS in Commerce Inventory Page Leading to Session Hijacking
Craft Commerce is an ecommerce platform for Craft CMS. Prior to 5.5.3, Stored XSS vulnerabilities exist in the Commerce Inventory page. The Product Title, Variant Title, and Variant SKU fields are rendered without proper HTML escaping, allowing an attacker to execute arbitrary JavaScript when any user (including administrators) views the inventory management page. This vulnerability is fixed in 5.5.3.
References
Affected products
- ==>= 5.0.0 < 5.5.3
Ignored packages (8)
pkgs.python312Packages.azure-mgmt-commerce
This is the Microsoft Azure Commerce Management Client Library
pkgs.python313Packages.azure-mgmt-commerce
This is the Microsoft Azure Commerce Management Client Library
pkgs.python314Packages.azure-mgmt-commerce
This is the Microsoft Azure Commerce Management Client Library
pkgs.python312Packages.mypy-boto3-marketplacecommerceanalytics
Type annotations for boto3 marketplacecommerceanalytics
-
nixos-25.11 boto3-marketplacecommerceanalytics-1.41.0
- nixos-25.11-small boto3-marketplacecommerceanalytics-1.41.0
- nixpkgs-25.11-darwin boto3-marketplacecommerceanalytics-1.41.0
pkgs.python313Packages.mypy-boto3-marketplacecommerceanalytics
Type annotations for boto3 marketplacecommerceanalytics
-
nixos-unstable boto3-marketplacecommerceanalytics-1.42.3
- nixpkgs-unstable boto3-marketplacecommerceanalytics-1.42.3
- nixos-unstable-small boto3-marketplacecommerceanalytics-1.42.3
-
nixos-25.11 boto3-marketplacecommerceanalytics-1.41.0
- nixos-25.11-small boto3-marketplacecommerceanalytics-1.41.0
- nixpkgs-25.11-darwin boto3-marketplacecommerceanalytics-1.41.0
pkgs.python314Packages.mypy-boto3-marketplacecommerceanalytics
Type annotations for boto3 marketplacecommerceanalytics
-
nixos-unstable boto3-marketplacecommerceanalytics-1.42.3
- nixpkgs-unstable boto3-marketplacecommerceanalytics-1.42.3
- nixos-unstable-small boto3-marketplacecommerceanalytics-1.42.3
pkgs.python312Packages.types-aiobotocore-marketplacecommerceanalytics
Type annotations for aiobotocore marketplacecommerceanalytics