https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 16 Oct 2026 11:15:43 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-233483 EUVD-2026-233483 https://cve.radiocsirt.org/vuln/euvd-2026-233483 https://cve.radiocsirt.org/vuln/fkie_cve-2022-31037 <p>OroCommerce is an open-source Business to Business Commerce application. Versions between 4.1.0 and 4.1.17 inclusive, 4.2.0 and 4.2.11 inclusive, and between 5.0.0 and 5.0.3 inclusive, are vulnerable to Cross-site Scripting in the UPS Surcharge field of the Shipping rule edit page. The attacker needs permission to create or edit a shipping rule. This issue has been patched in version 5.0.6. There are no known workarounds.</p> <p>OroCommerce is an open-source Business to Business Commerce application. Versions between 4.1.0 and 4.1.17 inclusive, 4.2.0 and 4.2.11 inclusive, and between 5.0.0 and 5.0.3 inclusive, are vulnerable to Cross-site Scripting in the UPS Surcharge field of the Shipping rule edit page. The attacker needs permission to create or edit a shipping rule. This issue has been patched in version 5.0.6. There are no known workarounds.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2022-31037 https://cve.radiocsirt.org/vuln/ghsa-4vf4-955g-vxp2 <p><strong>Affected:</strong> Packagist: oro/commerce</p> <p>### Impact Shipping rule edit page is vulnerable to cross site scripting (XSS) payload added to UPS Surcharge field. The attacker should have permission to create or edit a shipping rule.</p> <p><strong>Affected:</strong> Packagist: oro/commerce</p> <p>### Impact Shipping rule edit page is vulnerable to cross site scripting (XSS) payload added to UPS Surcharge field. The attacker should have permission to create or edit a shipping rule.</p> https://cve.radiocsirt.org/vuln/ghsa-4vf4-955g-vxp2 https://cve.radiocsirt.org/vuln/gsd-2022-31037 gsd-2022-31037 https://cve.radiocsirt.org/vuln/gsd-2022-31037