StrongShop v1.0 was discovered to contain a Server-Side Template Injection (SSTI) vulnerability via the component /shippingOptionConfig/index.blade.php.
CWE-1336 Improper Neutralization of Special Elements Used in a Template Engine