oroinc orocommerce

• CVE-2023-48296 Medium 4.3 OroPlatform's storefront user can access history and most viewed data from matching back-office user with the same ID 0.4%
• CVE-2023-32065 Medium 5.8 OroCommerce get-totals-for-checkout API endpoint returns unwanted data 0.5%
• CVE-2023-32064 Medium 5.0 OroCommerce Customer Portal Incorrect Customer and Customer Group Frontend Menus pages visibility 0.5%
• CVE-2022-35950 Medium 6.9 OroCommerce Cross-site Scripting vulnerability in add note dialog of Shopping List line item 0.4%
• CVE-2022-31037 Medium 6.9 OroCommerce vulnerable to Cross-site Scripting via Shipping rule editing page 0.5%