Lucene search

K
osvGoogleOSV:CVE-2019-8128
HistoryNov 06, 2019 - 12:15 a.m.

CVE-2019-8128

2019-11-0600:15:10
Google
osv.dev
2

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.2%

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can exploit it by injecting malicious Javascript into the name of main website.

5.3 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

46.2%