Vulnerability in EPiServer.Forms
When administrating a node in the Catalog UI it is possible to select a whole range of entries by marking one entry and clicking an entry to end while holding down the shift key.
However which entries that gets included in the selection depends on if they are expanded or not.
If a product is expanded the selection will include all of it's variants.
If a product is collapsed the selection will only include the product and none of it's variants.
We had a request that it should include the variants for all the products in the range, both expanded and collapsed products.