Lucene search

Magento 2 Community Edition XSS Vulnerability

🗓️ 24 May 2022 16:28:52Reported by GitHub Advisory DatabaseType

Stored XSS in Magento 2 admin pane

AI Insights are available for you today

Leverage the power of AI to quickly understand vulnerabilities, impacts, and exploitability

Reporter	Title	Published	Views	Family All 10
Prion	Cross site scripting	2 Aug 201922:15	–	prion
NVD	CVE-2019-7938	2 Aug 201922:15	–	nvd
Friends Of PHP	PRODSECBUG-2369: Stored cross-site scripting in the admin panel	25 Jun 201900:00	–	friendsofphp
Friends Of PHP	PRODSECBUG-2369: Stored cross-site scripting in the admin panel	25 Jun 201900:00	–	friendsofphp
Friends Of PHP	PRODSECBUG-2369: Stored cross-site scripting in the admin panel	25 Jun 201900:00	–	friendsofphp
OSV	Magento 2 Community Edition XSS Vulnerability	24 May 202216:52	–	osv
OSV	CVE-2019-7938	2 Aug 201922:15	–	osv
CVE	CVE-2019-7938	2 Aug 201922:15	–	cve
Cvelist	CVE-2019-7938	2 Aug 201921:33	–	cvelist
OpenVAS	Magento 2.1.x < 2.1.18, 2.2.x < 2.2.9, 2.3.x < 2.3.2 Multiple Vulnerabilities (Jun 2019)	4 Jul 201900:00	–	openvas

Vulners

Node

magento product-community-editionRange2.3–2.3.2

magento product-community-editionRange2.2–2.2.9

magento product-community-editionRange2.1–2.1.18

magento magento1eeRange1–1.14.4.2

magento magento1ceRange1–1.9.4.2

magento community-editionRange2.3.0–2.3.2

magento community-editionRange2.2.0–2.2.9

magento community-editionRange2.1.0–2.1.18

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-7938
web	www.web.archive.org/web/20220121051916/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/magento/magento1ce/CVE-2019-7938.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/magento/magento1ee/CVE-2019-7938.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7938.yaml
magento	www.magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
github	www.github.com/advisories/GHSA-mgfr-44wv-hqv6

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

24 May 2022 16:52Current

4.9Medium risk

Vulners AI Score4.9

CVSS23.5

CVSS34.8

EPSS0.00109

CWE-79