{
  "affected": [
    {
      "package": {
        "ecosystem": "Packagist",
        "name": "shopware/shopware"
      },
      "ranges": [
        {
          "events": [
            {
              "introduced": "5.2.0"
            },
            {
              "fixed": "5.3.7"
            }
          ],
          "type": "ECOSYSTEM"
        }
      ]
    }
  ],
  "aliases": [],
  "database_specific": {
    "cwe_ids": [
      "CWE-79"
    ],
    "github_reviewed": true,
    "github_reviewed_at": "2024-05-21T20:42:46Z",
    "nvd_published_at": null,
    "severity": "MODERATE"
  },
  "details": "A non-persistent Cross-Site Scripting (XSS) vulnerability has been identified in the Shopware eCommerce platform within the frontend. This vulnerability may allow an attacker to inject and execute malicious scripts in the context of a victim\u0027s web browser.",
  "id": "GHSA-jqr7-5h7r-ch8p",
  "modified": "2024-05-21T20:42:46Z",
  "published": "2024-05-21T20:42:46Z",
  "references": [
    {
      "type": "WEB",
      "url": "https://github.com/shopware5/shopware/commit/54461aa651566dc2701b873fe6bd94589604751b"
    },
    {
      "type": "WEB",
      "url": "https://community.shopware.com/_detail_2048.html"
    },
    {
      "type": "WEB",
      "url": "https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-01-2018?category=shopware-5-en/security-updates"
    },
    {
      "type": "WEB",
      "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/shopware/shopware/2018-01-22.yaml"
    },
    {
      "type": "PACKAGE",
      "url": "https://github.com/shopware5/shopware"
    }
  ],
  "schema_version": "1.4.0",
  "severity": [
    {
      "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N",
      "type": "CVSS_V3"
    }
  ],
  "summary": "Shopware Non-Persistent XSS in the Frontend"
}