Skip to content

Vendor

org.broadleafcommerce vulnerabilities

1 published CVE affecting org.broadleafcommerce, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
1
Low
0
Unscored
0
CISA KEV
0
Atom feed of org.broadleafcommerce alerts

Products

Latest org.broadleafcommerce CVEs

Newest publication first

  1. CVE-2023-33725 Broadleaf vulnerable to Cross-site Scripting

    Published
    MediumCVSS 6.1

    Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was discovered to contain a cross-site scripting (XSS) vulnerability via a customer signup with a crafted email address. This is fixed in 6.2.6.1-GA.

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.