Advisories · Technology
Thelia Back-office Default Twig Template.
Every CVE that names Thelia Back-office Default Twig Template among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Thelia Back-office Default Twig Template before 1.1.1 CSRF via Product Combination Routes
- Thelia Back-office Default Twig Template
- Cross-site request forgery (CSRF)
- CVSS 4.6 Medium
Thelia before 3.1.1 Stored XSS via SVG Store Logo and Banner Uploads
- Thelia
- Thelia Core
- Cross-site scripting (XSS)
- CVSS 5.9 Medium
Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actions
- Thelia
- Thelia Core
- Cross-site request forgery (CSRF)