Lucene search

K
osvGoogleOSV:GHSA-J49X-JJMJ-9FQJ
HistoryMay 24, 2022 - 5:00 p.m.

Magento XSS Vulnerability

2022-05-2417:00:29
Google
osv.dev
4

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

In Magento prior to 1.9.4.3 and Magento prior to 1.14.4.3, an authenticated user with limited administrative privileges can inject arbitrary JavaScript code via import / export functionality when creating profile action XML.

5.2 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

38.6%

Related for OSV:GHSA-J49X-JJMJ-9FQJ