Lucene search
GoogleOSV:CVE-2019-8145HistoryNov 06, 2019 - 1:15 a.m.
CVE-2019-8145
2019-11-0601:15:00
Google
osv.dev
4
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code into the attribute set name when listing the products.
Related
nvd
nvd
CVE-2019-8145
2019-11-06 01:15:25
github
github
Magento Cross-Site Scripting via Attribute Set Name
2019-11-12 22:59:43
cve
cve
CVE-2019-8145
2019-11-06 01:15:25
osv
osv
Magento Cross-Site Scripting via Attribute Set Name
2019-11-12 22:59:43
cvelist
cvelist
CVE-2019-8145
2019-11-06 00:04:43
prion
prion
Cross site scripting
2019-11-06 01:15:00
friendsofphp
friendsofphp
PRODSECBUG-2402: Cross-Site Scripting via Attribute Set Name
2019-10-08 00:00:00
openvas
openvas