CVE-2019-8092

🗓️ 05 Nov 2019 23:11:15Reported by GoogleType

osv🔗 osv.dev👁 7 Views

A reflected XSS vulnerability in Magento 2.2 & 2.3 allows authenticated users to inject JavaScript via email template previe

Reporter	Title	Published	Views	Family All 8
OSV	Magento 2 Community Edition XSS Vulnerability	24 May 202217:00	–	osv
Github Security Blog	Magento 2 Community Edition XSS Vulnerability	24 May 202217:00	–	github
NVD	CVE-2019-8092	5 Nov 201923:15	–	nvd
CVE	CVE-2019-8092	5 Nov 201923:15	–	cve
Friends Of PHP	PRODSECBUG-2489: Cross side scripting during the preview of email templates	8 Oct 201900:00	–	friendsofphp
Prion	Cross site scripting	5 Nov 201923:15	–	prion
Cvelist	CVE-2019-8092	5 Nov 201922:06	–	cvelist
OpenVAS	Magento 2.2.x < 2.2.10, 2.3.x < 2.3.3 or 2.3.2-p1 Multiple Vulnerabilities (Oct 2019)	7 Nov 201900:00	–	openvas

Source	Link
magento	www.magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo

05 Nov 2019 23:15Current

5.5Medium risk

Vulners AI Score5.5

EPSS0.001