Broadleafcommerce - vulnerabilities (CVEs)

2 CVEs in 1 products, 0 in the last 30 days, newest from 2023-06-21.

Products

• Broadleaf Commerce - 2 CVEs

Newest CVEs of Broadleafcommerce

• CVE-2023-33725 - CVSS 6.1 (medium), 2023-06-21: Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was discovered to contain a cross-site scripting (XSS) vulnerability via a customer signup with a…
• CVE-2020-21266 - CVSS 6.1 (medium), 2020-10-29: Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting (XSS) due to a slow HTTP post vulnerability.