CVE-2018-20713: Shopware

High severity, CVSS 8.8. EPSS: 1.1% chance of exploitation in the next 30 days.

Shopware before 5.4.3 allows SQL Injection by remote authenticated users, aka SW-21404.

Affected products

• Shopware Shopware: before 5.4.3 (fixed in 5.4.3)

Published 2019-01-15. Last modified 2026-06-17.