Beveiligingsadvies

CVE-2026-29173

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-03-10 19:54:25

Laatst bijgewerkt 2026-03-10 20:12:40

Toegewezen door GitHub_M

CVSS-score 1.9

Status PUBLISHED

Beschrijving

Craft Commerce is an ecommerce platform for Craft CMS. Prior to 4.10.2 and 5.5.3, a stored XSS vulnerability exists when a user tries to update the Order Status from the Commerce Orders Table. The Order Status Name is rendered without proper escaping, allowing script execution to occur. This vulnerability is fixed in 4.10.2 and 5.5.3.

← Alle CVE's bekijken Bekijk op cve.org ↗