Lucene search
GoogleOSV:GHSA-985W-MQQP-7287HistoryMay 24, 2022 - 5:00 p.m.
Magento 2 Community Edition XSS Vulnerability
2022-05-2417:00:25
Google
osv.dev
2
0.001 Low
EPSS
Percentile
27.3%
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated user can inject arbitrary Javascript code by manipulating section of a POST request related to customer’s email address.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-8120.yaml
github.com/magento/magento2
magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
nvd.nist.gov/vuln/detail/CVE-2019-8120
web.archive.org/web/20220121051105/https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update
Related
cvelist
cvelist
CVE-2019-8120
2019-11-05 22:49:32
cve
cve
CVE-2019-8120
2019-11-05 23:15:12
nvd
nvd
CVE-2019-8120
2019-11-05 23:15:12
github
github
Magento 2 Community Edition XSS Vulnerability
2022-05-24 17:00:25
friendsofphp
friendsofphp
PRODSECBUG-2448: Cross side scripting via admin panel dashboard
2019-10-08 00:00:00
prion
prion
Cross site scripting
2019-11-05 23:15:00
osv
osv
CVE-2019-8120
2019-11-05 23:15:12
openvas
openvas