VULNERABILITY INTELLIGENCE

CVE-2024-29376

CVSS score6.4 MEDIUM

EPSS probability0.42%

CISA KEVNot currently listed

Published2024-04-22

Last modified2026-06-17

Description

Sylius 1.12.13 is vulnerable to Cross Site Scripting (XSS) via the "Province" field in Address Book.