CVE-2024-29376
CVE-2024-29376
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Sylius 1.12.13 is vulnerable to Cross Site Scripting (XSS) via the "Province" field in Address Book.
CVSS 6.4 · Medium · EPSS 0.4% · Fix available
- Published
- Updated
Stack: php
Affected products and versions
n/a
- Versions
- n/a: Affected
No fix published
sylius/sylius Packagist
- Versions
- v0.1.0
- v0.10.0
- v0.11.0
- v0.12.0
- v0.13.0
- v0.14.0
- v0.15.0
- v0.16.0
- v0.17.0
- v0.18.0
- v0.19.0
- v0.2.0
- v0.3.0
- v0.5.0
- v0.6.0
- v0.7.0
- v0.8.0
- v0.9.0
- v1.0.0
- v1.0.0-alpha.1
- v1.0.0-alpha.2
- v1.0.0-beta.1
- v1.0.0-beta.2
- v1.0.0-beta.3
- v1.0.0-rc.1
- v1.0.0-rc.2
- v1.0.1
- v1.0.10
- v1.0.11
- v1.0.12
- v1.0.13
- v1.0.14
- v1.0.15
- v1.0.16
- v1.0.17
- v1.0.18
- v1.0.2
- v1.0.3
- v1.0.4
- v1.0.5
- v1.0.6
- v1.0.7
- v1.0.8
- v1.0.9
- v1.1.0
- v1.1.0-RC
- v1.1.1
- v1.1.10
- v1.1.11
- v1.1.12
- v1.1.13
- v1.1.14
- v1.1.15
- v1.1.16
- v1.1.17
- v1.1.18
- v1.1.2
- v1.1.3
- v1.1.4
- v1.1.5
- v1.1.6
- v1.1.7
- v1.1.8
- v1.1.9
- v1.2.0
- v1.2.0-BETA
- v1.2.0-RC
- v1.2.1
- v1.2.10
- v1.2.11
- v1.2.12
- v1.2.13
- v1.2.14
- v1.2.15
- v1.2.16
- v1.2.17
- v1.2.2
- v1.2.3
- v1.2.4
- v1.2.5
- v1.2.6
- v1.2.7
- v1.2.8
- v1.2.9
- v1.3.0
- v1.3.0-BETA
- v1.3.1
- v1.3.10
- v1.3.11
- v1.3.12
- v1.3.13
- v1.3.14
- v1.3.15
- v1.3.16
- v1.3.2
- v1.3.3
- v1.3.4
- v1.3.5
- v1.3.6
- v1.3.7
- v1.3.8
- v1.3.9
- v1.4.0
- v1.4.0-BETA.1
- v1.4.1
- v1.4.10
- v1.4.11
- v1.4.12
- v1.4.2
- v1.4.3
- v1.4.4
- v1.4.5
- v1.4.6
- v1.4.7
- v1.4.8
- v1.4.9
- v1.5.0
- v1.5.0-RC.1
- v1.5.1
- v1.5.2
- v1.5.3
- v1.5.4
- v1.5.5
- v1.5.6
- v1.5.7
- v1.5.8
- v1.5.9
- v1.6.0
- v1.6.0-ALPHA.1
- v1.6.0-ALPHA.2
- v1.6.0-RC.1
- v1.6.1
- v1.6.2
- v1.6.3
- v1.6.4
- v1.6.5
- v1.6.6
- v1.6.7
- v1.6.8
- v1.6.9
- v1.7.0
- v1.7.0-ALPHA.1
- v1.7.0-ALPHA.2
- v1.7.0-RC.1
- v1.7.1
- v1.7.10
- v1.7.11
- v1.7.2
- v1.7.3
- v1.7.4
- v1.7.5
- v1.7.6
- v1.7.7
- v1.7.8
- v1.7.9
- v1.8.0
- v1.8.0-RC.1
- v1.8.1
- v1.8.10
- v1.8.11
- v1.8.12
- v1.8.2
- v1.8.3
- v1.8.4
- v1.8.5
- v1.8.6
- v1.8.7
- v1.8.8
- v1.8.9
- v1.9.0
- v1.9.0-ALPHA.1
- v1.9.0-ALPHA.2
- v1.9.0-BETA.1
- v1.9.0-BETA.2
- v1.9.0-BETA.3
- v1.9.0-RC.1
- v1.9.0-RC.2
- v1.9.1
- v1.9.10
- v1.9.11
- v1.9.2
- v1.9.3
- v1.9.4
- v1.9.5
- v1.9.6
- v1.9.7
- v1.9.8
- v1.9.9
- Affected ranges
- ECOSYSTEM: < 1.9.12
Update to 1.9.12
sylius/sylius Packagist
- Versions
- v1.10.0
- v1.10.0-alpha.1
- v1.10.0-beta.1
- v1.10.0-rc.1
- v1.10.1
- v1.10.10
- v1.10.11
- v1.10.12
- v1.10.13
- v1.10.14
- v1.10.15
- v1.10.2
- v1.10.3
- v1.10.4
- v1.10.5
- v1.10.6
- v1.10.7
- v1.10.8
- v1.10.9
- Affected ranges
- ECOSYSTEM: ≥ 1.10.0-alpha.1, < 1.10.16
Update to 1.10.16
sylius/sylius Packagist
- Versions
- v1.11.0
- v1.11.0-alpha.1
- v1.11.0-alpha.2
- v1.11.0-beta.1
- v1.11.0-rc.1
- v1.11.1
- v1.11.10
- v1.11.11
- v1.11.12
- v1.11.13
- v1.11.14
- v1.11.15
- v1.11.16
- v1.11.2
- v1.11.3
- v1.11.4
- v1.11.5
- v1.11.6
- v1.11.7
- v1.11.8
- v1.11.9
- Affected ranges
- ECOSYSTEM: ≥ 1.11.0-alpha.1, < 1.11.17
Update to 1.11.17
sylius/sylius Packagist
- Versions
- v1.12.0
- v1.12.0-alpha.1
- v1.12.0-alpha.2
- v1.12.0-beta.1
- v1.12.0-rc.1
- v1.12.1
- v1.12.10
- v1.12.11
- v1.12.12
- v1.12.13
- v1.12.14
- v1.12.15
- v1.12.2
- v1.12.3
- v1.12.4
- v1.12.5
- v1.12.6
- v1.12.7
- v1.12.8
- v1.12.9
- Affected ranges
- ECOSYSTEM: ≥ 1.12.0-alpha.1, < 1.12.16
Update to 1.12.16
sylius/sylius Packagist
- Versions
- v1.13.0
- v1.13.0-alpha.1
- v1.13.0-alpha.2
- v1.13.0-beta.1
- v1.13.0-rc.1
- Affected ranges
- ECOSYSTEM: ≥ 1.13.0-alpha.1, < 1.13.1
Update to 1.13.1