Thelia Thelia Core
2 CVEs affecting Thelia Thelia Core. Latest disclosed: 2026-11-01. Critical: 0, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2026-120205 | High | 8.0 | 2026-10-31 | Thelia before 3.1.0 contains a stored cross-site scripting vulnerability in ForSomeCustomers::getSummary() that allows unauthenticated attackers to inject scri… |
CVE-2026-120248 | Medium | 4.8 | 2026-11-01 | Thelia before 3.1.1 contains a stored cross-site scripting vulnerability that allows authenticated back-office administrators with store update permission to i… |