📦 Saleor

This CVE describes an Insecure Direct Object Reference (IDOR) vulnerability in Saleor e-commerce platform that allows unauthenticated attackers to access sensitive order information in plain text. The...

This stored cross-site scripting (XSS) vulnerability in Saleor e-commerce platform allows malicious staff members to inject HTML/JavaScript into rich text fields. The injected scripts execute when oth...

This vulnerability allows authenticated staff users or apps in Saleor e-commerce platform to upload malicious HTML/SVG files containing JavaScript. When these files are served from the same domain as ...