Skip to content

Vendor

spscommerce vulnerabilities

1 published CVE affecting spscommerce, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).

Total
1
Critical
0
High
0
Medium
0
Low
0
Unscored
1
CISA KEV
0
Atom feed of spscommerce alerts

Products

Latest spscommerce CVEs

Newest publication first

  1. GHSA-cfxh-frx4-9gjg Cross-site Scripting in @spscommerce/ds-react

    Published
    Unknown

    Impact XSS, anyone using the SPS Select with options prop populated from user input is impacted. If these options are stored, then it could have been a stored XSS. Patches The code has been patched for version 7 of woodland. Users should upgrade to 7.17.4 or higher Workarounds Th...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.