All vulnerabilities

Servers and applications

CVE-2021-41188

Shopware is open source e-commerce software. Versions prior to 5.7.6 contain a cross-site scripting vulnerability. This issue is patched in version 5.7.6. Two workarounds are available. Using the security plugin or adding a particular following config to the `.htaccess` file will protect against cross-site scripting in this case. There is also a config for those using nginx as a server. The…

Severity
Medium 5.4
Published
26 Oct 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
5.7.6
Sources
NVD

Affected software

SoftwareAffected versions
ShopwareServers and applications · cpe:a:shopware:shopware
  • Every version before 5.7.6

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-41188
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-41188