Impact

Persistent XSS in newsletter module

Patches

We recommend updating to the current version 5.6.9. You can get the update to 5.6.9 regularly via the Auto-Updater or directly via the download overview.

For older versions you can use the Security Plugin:
https://store.shopware.com/en/swag575294366635f/shopware-security-plugin.html

References

https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-11-2020

References

• GHSA-hrfh-fp4x-crrq
• https://docs.shopware.com/en/shopware-5-en/security-updates/security-update-11-2020