Oroinc Oroplatform
7 CVEs affecting Oroinc Oroplatform. Latest disclosed: 2024-12-06. Critical: 0, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2021-43852 | High | 8.8 | 2022-01-04 | OroPlatform is a PHP Business Application Platform. In affected versions by sending a specially crafted request, an attacker could inject properties into exist… |
CVE-2022-41951 | High | 8.5 | 2023-11-27 | OroPlatform is a PHP Business Application Platform (BAP) designed to make development of custom business applications easier and faster. Path Traversal is poss… |
CVE-2021-41236 | Medium | 6.9 | 2022-01-04 | OroPlatform is a PHP Business Application Platform. In affected versions the email template preview is vulnerable to XSS payload added to email template conten… |
CVE-2024-50677 | Medium | 6.1 | 2024-12-06 | A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected int… |
CVE-2023-32062 | Medium | 5.0 | 2023-11-27 | OroPlatform is a package that assists system and user calendar management. Back-office users can access information from any system calendar event, bypassing A… |
CVE-2023-48296 | Medium | 4.3 | 2024-03-25 | OroPlatform is a PHP Business Application Platform (BAP). Navigation history, most viewed and favorite navigation items are returned to storefront user in JSO… |
CVE-2023-45824 | Medium | 4.3 | 2024-03-25 | OroPlatform is a PHP Business Application Platform (BAP). A logged in user can access page state data of pinned pages of other users by pageId hash. This vuln… |