Lucene search

K
osvGoogleOSV:CVE-2019-8120
HistoryNov 05, 2019 - 11:15 p.m.

CVE-2019-8120

2019-11-0523:15:12
Google
osv.dev
4

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.3%

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated user can inject arbitrary Javascript code by manipulating section of a POST request related to customer’s email address.

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.3%