CVE-2024-29376: Sylius

Medium severity, CVSS 6.4. EPSS: 0.4% chance of exploitation in the next 30 days.

Sylius 1.12.13 is vulnerable to Cross Site Scripting (XSS) via the "Province" field in Address Book.

Affected products

• Sylius Sylius: version 1.12.13 only

Published 2024-04-22. Last modified 2026-06-17.