Servers and applications
CVE-2021-41188
Shopware is open source e-commerce software. Versions prior to 5.7.6 contain a cross-site scripting vulnerability. This issue is patched in version 5.7.6. Two workarounds are available. Using the security plugin or adding a particular following config to the `.htaccess` file will protect against cross-site scripting in this case. There is also a config for those using nginx as a server. The…
- Severity
- Medium 5.4
- Published
- 26 Oct 2021
- Last changed
- 17 Jun 2026
- Added to UpHeron
- 1 Nov 2026
- Fixed in
- 5.7.6
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
ShopwareServers and applications · cpe:a:shopware:shopware |
|