CVE-2024-37621: Strongshop

High severity, CVSS 7.2. EPSS: 0.7% chance of exploitation in the next 30 days.

StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shippingOptionConfig/index.blade.php.

Affected products

• Strongshop Strongshop: version 1.0 only

Published 2024-06-17. Last modified 2026-06-17.