Vuln
·
Scope
Home
Packages
KEV
Critical
Insights
EN
中
Loading…
Packagist/shopware/storefront — 5 CVEs · VulnScope
pkg:Packagist/
shopware/storefront
5 total CVEs
HIGH
2
MEDIUM
3
✅ Check your installed version
Check
All known vulnerabilities
HIGH
7.5
CVE-2024-27917
Shopware's session is persistent in Cache for 404 pages
>= 6.5.8.0, < 6.5.8.7
HIGH
7.1
CVE-2025-67648
Shopware Storefront Reflected XSS in Storefront Login Page
>= 6.4.6.0, < 6.6.10.10
MEDIUM
6.3
CVE-2022-24747
HTTP caching is marking private HTTP headers as public in Shopware
from 0, < 6.4.8.2
MEDIUM
6.1
HTML injection possibility in voucher code form in Shopware
from 0, < 6.4.8.1
MEDIUM
4.8
Shopware guest session is shared between customers
from 0, < 6.4.8.2
CVE-2022-24746
CVE-2022-24745