← All advisories

Medium severity6.1NVD Advisory· Published Aug 26, 2019· Updated Jun 17, 2026

CVE-2019-15489

CVE-2019-15489

Description

laracom (aka Laravel FREE E-Commerce Software) 1.4.11 has search?q= XSS.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
jsdecena/laracomPackagist	>= 1.4.11, < 1.5.0	1.5.0

Affected products

3

Laracom/Laracom
cpe:2.3:a:laracom:laracom:1.4.11:*:*:*:*:*:*:*
Laravel FREE E-Commerce Software/laracomdescription
ghsa-coords
pkg:composer/jsdecena/laracom
Range: >= 1.4.11, < 1.5.0

Patches

Vulnerability mechanics

References

4

github.com/Laracommerce/laracom/pull/211nvdExploitPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-qc2p-6qrf-25j2ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-15489ghsaADVISORY
github.com/jsdecena/laracom/commit/36ff6a5c4a7878c719304e9d9a5f1fc74a5af474ghsaWEB

News mentions

0

No linked articles in our index yet.