Skip to content

PatchFirst · Latest vulnerabilities

thelia/backoffice-default-template vulnerabilities

Vulnerabilities published for thelia/backoffice-default-template in the last 30 days: 0. Listed in the KEV catalogue: 0.

RSS ↗ JSON ↗

Vulnerability: 1

GHSA-pp7v-wxx9-hm6r
Medium · CVSS 6.1Fix available
Thelia BackOffice default template vulnerable to Cross-site Scripting
The BackOffice of Thelia (`error.html` template) has a cross-site scripting vulnerability in version 2.1.0 and 2.1.1 but not version 2.0.X. Version 2.1.2 contains a patch for the issue.
thelia/backoffice-default-template PHP
- Update to 2.1.2
Published May 30, 2024Updated December 5, 2024
Source advisory 1 ↗Source advisory 2 ↗Source advisory 3 ↗

Check your server

Check your installed stack and versions against the current vulnerability feeds.

Check your server →