VU#157374: XSS vulnerability in Shopware 6 enables Admin Token Theft and RCE
Imported from official source
Shopware 6.7 contains a stored cross-site scripting (XSS) vulnerability in its media upload functionality that can lead to administrator credential compromise and remote code execution. Shopware is an open-source e-commerce platform used to build and manage online stores. …
This version
- Version
- 1 of 1
- Recorded
- October 13, 2026 19:00
- Change
- Initial
- Content hash
074eb8e0d44c793dafd351b18ddb4a83- All versions
- Revision history