Lucene search

K
osvGoogleOSV:GHSA-45H4-6GCJ-6HWV
HistoryMay 24, 2022 - 5:21 p.m.

Magento Stored cross-site scripting

2022-05-2417:21:49
Google
osv.dev

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.0%

Magento versions 2.3.4 and earlier, 2.2.11 and earlier (see note), 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

5.5 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

28.0%