PatchFirst · Latest vulnerabilities
Vulnerabilities published for thelia/thelia in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
An authentication bypass was identifed in thelia/thelia project for customer and admin. This vulnerability is present from version 2.0.0-beta1 and is fixed in 2.1.3 and 2.2.0-alpha1.
The BackOffice of Thelia (`error.html` template) has a cross-site scripting vulnerability in version 2.1.0 and 2.1.1 but not version 2.0.X. Version 2.1.2 contains a patch for the issue.
Check your installed stack and versions against the current vulnerability feeds.