CVE-2023-3294

MediumCVSS 6.1

Published: 16/06/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.46%

36th percentile - higher than 36% of all known CVEs

Summary

In the GitHub repository saleor/react-storefront prior to version c29aab226f07ca980cc19787dcef101e11b83ef7, there is a Cross-site Scripting (XSS) vulnerability in the DOM context.

Risk Assessment

An attacker could exploit this vulnerability to inject malicious JavaScript code, potentially leading to user data theft or session hijacking.

Recommendation

It is recommended to update to the latest version of the saleor/react-storefront repository to mitigate this vulnerability.

Original NVD description (English source)

Cross-site Scripting (XSS) - DOM in GitHub repository saleor/react-storefront prior to c29aab226f07ca980cc19787dcef101e11b83ef7.