← Back

Centarro

centarro

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Commerce Core
commerce_core

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Centarro
1Commerce Core
Aug 6, 2026
Jul 10, 2026
N/A· v4
5.4 MEDIUM· v3
N/A· v2
Improper Neutralization of Input During Web Page Generation ("Cross-site Scripting") vulnerability in Drupal Commerce Core allows Stored XSS. This issue affects Commerce Core versions: from 3.3.0 to 3.3.6.