CVE-2021-3841

Name of the Vulnerable Software and Affected Versions sylius/sylius versions prior to 1.9.10 sylius/sylius versions prior to 1.10.11 sylius/sylius versions prior to 1.11.2

Description The issue is related to stored cross-site scripting (XSS) through SVG files, allowing attackers to inject malicious scripts that can be executed in the context of the user's browser.

Recommendations For sylius/sylius versions prior to 1.9.10, update to version 1.9.10 or later. For sylius/sylius versions prior to 1.10.11, update to version 1.10.11 or later. For sylius/sylius versions prior to 1.11.2, update to version 1.11.2 or later.