Lucene search
GoogleOSV:GHSA-MJGF-XMRR-6GVXHistoryMay 24, 2022 - 4:52 p.m.
Magento 2 Community Edition XSS Vulnerability
2022-05-2416:52:22
Google
osv.dev
4
0.001 Low
EPSS
Percentile
27.3%
A stored cross-site scripting vulnerability exists in Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to the tax notifications configuration in the Magento admin panel.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7853.yaml
github.com/magento/magento2
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-23
nvd.nist.gov/vuln/detail/CVE-2019-7853
web.archive.org/web/20220127030535/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-24
Related
prion
prion
Cross site scripting
2019-08-02 22:15:00
cve
cve
CVE-2019-7853
2019-08-02 22:15:14
osv
osv
CVE-2019-7853
2019-08-02 22:15:14
cvelist
cvelist
CVE-2019-7853
2019-08-02 21:36:58
nvd
nvd
CVE-2019-7853
2019-08-02 22:15:14
friendsofphp
friendsofphp
github
github
Magento 2 Community Edition XSS Vulnerability
2022-05-24 16:52:22
openvas
openvas