Vulnerability Database
296,747
Total vulnerabilities in the database
CVE-2022-31037
OroCommerce is an open-source Business to Business Commerce application. Versions between 4.1.0 and 4.1.17 inclusive, 4.2.0 and 4.2.11 inclusive, and between 5.0.0 and 5.0.3 inclusive, are vulnerable to Cross-site Scripting in the UPS Surcharge field of the Shipping rule edit page. The attacker needs permission to create or edit a shipping rule. This issue has been patched in version 5.0.6. There are no known workarounds.
| Software | From | Fixed in |
|---|---|---|
| oroinc / orocommerce | 5.0.0 | 5.0.3.x |
| oroinc / orocommerce | 4.2.0 | 4.2.11.x |
| oroinc / orocommerce | 4.1.0 | 4.1.17.x |
oro / commerce
|
4.1.0 | 5.0.6 |
Deep Security Visibility Without the Complexity
SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.
- No setup fees
- 5-min deployment
- Cancel anytime