Vulnerabilities > Sylius > Sylius > 1.3.15

DATE CVE VULNERABILITY TITLE RISK
2022-03-14 CVE-2022-24749 Cross-site Scripting vulnerability in Sylius
Sylius is an open source eCommerce platform.
network
sylius CWE-79
4.3
2022-03-14 CVE-2022-24742 Exposure of Resource to Wrong Sphere vulnerability in Sylius
Sylius is an open source eCommerce platform.
local
low complexity
sylius CWE-668
5.5
2022-03-14 CVE-2022-24733 Improper Restriction of Rendered UI Layers or Frames vulnerability in Sylius
Sylius is an open source eCommerce platform.
network
sylius CWE-1021
5.8
2020-10-19 CVE-2020-15245 Missing Authorization vulnerability in Sylius
In Sylius before versions 1.6.9, 1.7.9 and 1.8.3, the user may register in a shop by email [email protected], verify it, change it to the mail [email protected] and stay verified and enabled.
network
low complexity
sylius CWE-862
4.0