← Back

Broadleafcommerce

broadleafcommerce

2 CVEs • 1 product

Products (1)

Click to collapse
Toggle
Broadleaf Commerce
broadleaf_commerce
2 CVEs

CVEs (2)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-33725
1Broadleafcommerce
1Broadleaf Commerce
Jun 17, 2026
Jun 21, 2023
N/A· v4
6.1 MEDIUM· v3
N/A· v2
Broadleaf 5.x and 6.x (including 5.2.25-GA and 6.2.6-GA) was discovered to contain a cross-site scripting (XSS) vulnerability via a customer signup with a crafted email address. This is fixed in 6.2.6.1-GA.
CVE-2020-21266
1Broadleafcommerce
1Broadleaf Commerce
Jun 17, 2026
Oct 29, 2020
N/A· v4
6.1 MEDIUM· v3
4.3 MEDIUM· v2
Broadleaf Commerce 5.1.14-GA is affected by cross-site scripting (XSS) due to a slow HTTP post vulnerability.