Lucene search
GoogleOSV:GHSA-GG96-8W9X-7RX9HistoryMay 24, 2022 - 4:52 p.m.
Magento 2 Community Edition Cross-site Scripting Vulnerability
2022-05-2416:52:27
Google
osv.dev
6
0.001 Low
EPSS
Percentile
27.3%
A stored cross-site scripting vulnerability exists in the product catalog form of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to the product catalog to inject malicious javascript.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7921.yaml
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
nvd.nist.gov/vuln/detail/CVE-2019-7921
web.archive.org/web/20220121051916/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
Related
nvd
nvd
CVE-2019-7921
2019-08-02 22:15:18
veracode
veracode
Cross-site Scripting (XSS)
2019-08-07 06:21:01
osv
osv
CVE-2019-7921
2019-08-02 22:15:18
prion
prion
Cross site scripting
2019-08-02 22:15:00
cvelist
cvelist
CVE-2019-7921
2019-08-02 21:28:17
cve
cve
CVE-2019-7921
2019-08-02 22:15:18
friendsofphp
friendsofphp
PRODSECBUG-2337: Stored cross-site scripting in the catalog templates form
2019-06-25 00:00:00
github
github
Magento 2 Community Edition Cross-site Scripting Vulnerability
2022-05-24 16:52:27
openvas
openvas