📦 Craft Commerce

by Craftcms

🔍 What is Craft Commerce?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2026-25522

MEDIUM CVSS 4.8 Feb 3, 2026

A stored cross-site scripting (XSS) vulnerability in Craft Commerce allows attackers to inject malicious JavaScript into Shipping Zone fields. When administrators view these fields in the admin panel,...