oroinc/orocommerce · Security
OroCommerce vulnerable to XSS when adding class name to Selector Manager on pages that use GrapeJS editor
- GHSA ID
- GHSA-6f85-3f8q-qc94
- Severity
- medium
- Published
- Updated
- CVSS
- 6.9 · CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N
- CVSS v3
- 6.9 · CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:N
Description
Impact
Due to insufficient class name validation in GrapeJS library it's possible to add executable JS code in class name through Selector Manager
Relates to
Patch
Update GrapeJS dependency to >=v0.19.5
CWEs
- CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')