← All advisories

High severity7.4NVD Advisory· Published Jun 23, 2019· Updated Jun 17, 2026

CVE-2019-12935

CVE-2019-12935

Description

Shopware before 5.5.8 has XSS via the Query String to the backend/Login or backend/Login/load/ URI.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
shopware/shopwarePackagist	< 5.5.8	5.5.8

Affected products

2

Shopware/Shopware
cpe:2.3:a:shopware:shopware:*:*:*:*:*:*:*:*
Range: <5.5.8
ghsa-coords
pkg:composer/shopware/shopware
Range: < 5.5.8

Patches

Vulnerability mechanics

References

7

www.netsparker.com/web-applications-advisories/ns-19-004-cross-site-scripting-in-shopware/nvdExploitThird Party Advisory
seclists.org/fulldisclosure/2019/Jun/32nvdThird Party AdvisoryWEB
github.com/advisories/GHSA-8qxh-hcr9-2379ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-12935ghsaADVISORY
www.shopware.com/en/changelog/nvdRelease NotesVendor AdvisoryWEB
www.netsparker.com/web-applications-advisories/ns-19-004-cross-site-scripting-in-shopwareghsaWEB
packetstormsecurity.com/files/153145/Shopware-5.5.6-Cross-Site-Scripting.htmlnvd

News mentions

0

No linked articles in our index yet.