Strongshop

strongshop

Vendor: Strongshop • 2 CVEs

CVEs (2)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-37621 1Strongshop 1Strongshop Jun 17, 2026 Jun 17, 2024 N/A· v4 7.2 HIGH· v3 N/A· v2 StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shippingOptionConfig/index.blade.php.
CVE-2024-37619 1Strongshop 1Strongshop Jun 17, 2026 Jun 17, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 StrongShop v1.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the spec_group_id parameter at /spec/index.blade.php.