Vulnerabilities > Broadleafcommerce

DATE	CVE	VULNERABILITY TITLE	RISK
2023-06-21	CVE-2023-33725	Cross-site Scripting vulnerability in Broadleafcommerce Broadleaf Commerce Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was discovered to contain a cross-site scripting (XSS) vulnerability via a customer signup with a crafted email address. network low complexity broadleafcommerce CWE-79	6.1
2020-10-29	CVE-2020-21266	Cross-site Scripting vulnerability in Broadleafcommerce Broadleaf Commerce 5.1.14Ga Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting (XSS) due to a slow HTTP post vulnerability. network broadleafcommerce CWE-79	4.3

Vulnerabilities > Broadleafcommerce {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Broadleafcommerce"}]}