TI-2022-16377 CVE-2022-35950 · GHSA-2jc6-3fhj-8q84
OroCommerce Cross-site Scripting vulnerability in add note dialog of Shopping List line item
Priority LOW 31
OroCommerce is an open-source Business to Business Commerce application.
oroinc
Records13All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9
Exploited now
oroinc records in CISA KEVNo oroinc vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
4 records in Orocommerce · all components
TI-2022-13082 CVE-2022-31037 · GHSA-4vf4-955g-vxp2
OroCommerce vulnerable to Cross-site Scripting via Shipping rule editing page
Priority LOW 31
OroCommerce is an open-source Business to Business Commerce application.
TI-2023-15369 CVE-2023-32065 · GHSA-88g2-xgh9-4ph2
OroCommerce get-totals-for-checkout API endpoint returns unwanted data
Priority LOW 27
OroCommerce is an open-source Business to Business Commerce application built with flexibility in mind.
TI-2023-15368 CVE-2023-32064 · GHSA-8gwj-68w6-7v6c
OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibility
Priority LOW 23
OroCommerce package with customer portal and non authenticated visitor website base features.