Skip to content

Craft Commerce is Vulnerable to Stored XSS while updating Order Status from Orders Table

Low severity GitHub Reviewed Published Mar 9, 2026 in craftcms/commerce • Updated Mar 10, 2026

No closed alerts for this advisory

Give feedback on Dependabot alerts