Lucene search
GoogleOSV:GHSA-M3V2-R236-5XGQHistoryMay 24, 2022 - 4:52 p.m.
Magento 2 Community Edition XSS Vulnerability
2022-05-2416:52:23
Google
osv.dev
4
0.001 Low
EPSS
Percentile
38.6%
A reflected cross-site scripting vulnerability exists in the Product widget chooser functionality in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7862.yaml
github.com/magento/magento2
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13
nvd.nist.gov/vuln/detail/CVE-2019-7862
web.archive.org/web/20211206084839/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13
Related
osv
osv
CVE-2019-7862
2019-08-02 22:15:15
github
github
Magento 2 Community Edition XSS Vulnerability
2022-05-24 16:52:23
prion
prion
Cross site scripting
2019-08-02 22:15:00
nvd
nvd
CVE-2019-7862
2019-08-02 22:15:15
friendsofphp
friendsofphp
PRODSECBUG-2182: Reflected cross-site scripting in the admin panel.
2019-06-25 00:00:00
cve
cve
CVE-2019-7862
2019-08-02 22:15:15
cvelist
cvelist
CVE-2019-7862
2019-08-02 21:14:09
openvas
openvas