A vulnerability classified as critical was found in Shopware up to 6.5.8.12/6.6.5.0. This vulnerability affects unknown code. The manipulation of the argument context leads to improper neutralization of special elements used in a template engine.
This vulnerability was named CVE-2024-42356. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.