Product by Thelia

    Thelia Core

    3 known vulnerabilities in Thelia Core (Thelia), 0 of them actively exploited (CISA KEV).

    Key figures

    3

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Thelia Core (Thelia)
    HighCVE-2026-120205

    Thelia before 3.1.0 Stored XSS via Coupon Condition Customer Name

    also in 1 other product

    		8.0
    MediumCVE-2026-120206

    Thelia before 3.2.0 Back-Office CSRF via URL Token and Unprotected Actions

    also in 2 other products

    		5.9
    MediumCVE-2026-120248

    Thelia before 3.1.1 Stored XSS via SVG Store Logo and Banner Uploads

    also in 2 other products

    		4.8

    All products by Thelia