CVE-2026-63459 | VendureHQ Vendure up to 3.6.4 RichTextDescriptionCell order-table-cell-components.tsx cross site scripting

A vulnerability was found in VendureHQ Vendure up to 3.6.4 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file packages/dashboard/src/lib/components/shared/table-cell/order-table-cell-components.tsx of the component RichTextDescriptionCell. The manipulation results in cross site scripting.

This vulnerability is cataloged as CVE-2026-63459. The attack may be launched remotely. There is no exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More