6.1Mittel
CVE-2026-25488Craft Commerce has Stored XSS in Tax Categories (Name & Description) Fields Leading to Potential Privilege Escalation
Beschreibung
Craft Commerce is an ecommerce platform for Craft CMS. In versions from 4.0.0-RC1 to 4.10.0 and from 5.0.0 to 5.5.1, a stored XSS vulnerability in Craft Commerce allows attackers to execute malicious JavaScript in an administrator’s browser. This occurs because the Tax Categories (Name & Description) fields in the Store Management section are not properly sanitized before being displayed in the admin panel. This issue has been patched in versions 4.10.1 and 5.5.2.
Schwachstellentyp (CWE):
CWE-79
Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.
Betroffene Produkte und Versionen
| Hersteller | Produkt | Versionen | |
|---|---|---|---|
| craftcms | commerce | >= 4.0.0-RC1, < 4.10.1, >= 5.0.0, < 5.5.2 | |
| craftcms | craft commerce | 4.0.1 – < 4.10.1 |
Referenzen und Patches
- https://github.com/craftcms/commerce/security/advisories/GHSA-p6w8-q63m-72c8 ExploitVendor Advisory
- https://github.com/craftcms/commerce/commit/fa273330807807d05b564d37c88654cd772839ee Patch
- https://github.com/craftcms/commerce/releases/tag/4.10.1 Release Notes
- https://github.com/craftcms/commerce/releases/tag/5.5.2 Release Notes
CPE-Treffer (NVD) (4)
cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*≥ 4.0.1 < 4.10.1cpe:2.3:a:craftcms:craft_commerce:*:*:*:*:*:craft_cms:*:*≥ 5.0.0 < 5.5.2cpe:2.3:a:craftcms:craft_commerce:4.0.0:-:*:*:*:craft_cms:*:*cpe:2.3:a:craftcms:craft_commerce:4.0.0:rc1:*:*:*:craft_cms:*:*