Browse CVEs

MEDIUM 6.1 CVE-2024-50677 A cross-site scripting (XSS) vulnerability in OroPlatform CMS v5.1 allows attackers to execute arbitrary web scripts or HTML via a crafted payload in… Oroplatform No fix yet Fix from $1,6002024-12-06 MEDIUM 5.8 CVE-2023-32065 OroCommerce is an open-source Business to Business Commerce application built with flexibility in mind. Detailed Order totals information may be rece… Orocommerce 5.0.11 / 5.1.1+ Fix from $1,6002023-11-28 MEDIUM 5.0 CVE-2023-32063 OroCalendarBundle enables a Calendar feature and related functionality in Oro applications. Back-office users can access information from any call ev… Client Relationship Management 5.0.4 / 5.1.1+ Fix from $1,6002023-11-28 CRITICAL 9.8 CVE-2022-41951 OroPlatform is a PHP Business Application Platform (BAP) designed to make development of custom business applications easier and faster. Path Travers… Oroplatform 5.0.9+ Fix from $2,3002023-11-27 MEDIUM 5.4 CVE-2022-31037 OroCommerce is an open-source Business to Business Commerce application. Versions between 4.1.0 and 4.1.17 inclusive, 4.2.0 and 4.2.11 inclusive, and… Orocommerce after 5.0.3 Fix from $1,6002022-10-18 HIGH 8.8 CVE-2021-43852 OroPlatform is a PHP Business Application Platform. In affected versions by sending a specially crafted request, an attacker could inject properties … Oroplatform 4.1.14 / 4.2.8+ Fix from $1,9502022-01-04 MEDIUM 5.4 CVE-2021-39198 OroCRM is an open source Client Relationship Management (CRM) application. Affected versions we found to suffer from a vulnerability which could an a… Client Relationship Management after 4.2.5 Fix from $1,6002021-11-19