CVE-2022-31057

—

CVSS 3.1

5.4 medium

EPSS

<1%p50

Published

Jun 27, 2022 (Jun 27, 2022)

Modified

Jun 17, 2026

Description

Shopware is an open source e-commerce software made in Germany. Versions of Shopware 5 prior to version 5.7.12 are subject to an authenticated Stored XSS in Administration. Users are advised to upgrade. There are no known workarounds for this issue.

Vendors: shopware
Products: shopware
Ecosystems: E-commerce
Weakness: CWE-79
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

NVD CVE.org GitHub PoCs EPSS (0.7%)

In the news0 stories

No ingested article mentions this CVE yet.