Lucene search
GoogleOSV:GHSA-R68F-45JG-64M6HistoryMay 24, 2022 - 4:52 p.m.
Magento 2 Community Edition XSS Vulnerability
2022-05-2416:52:27
Google
osv.dev
1
0.001 Low
EPSS
Percentile
27.3%
A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to edit product content pages to inject malicious javascript.
References
github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/CVE-2019-7927.yaml
github.com/magento/magento2
magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13
nvd.nist.gov/vuln/detail/CVE-2019-7927
web.archive.org/web/20211206084839/https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13
Related
osv
osv
CVE-2019-7927
2019-08-02 22:15:18
nvd
nvd
CVE-2019-7927
2019-08-02 22:15:18
friendsofphp
friendsofphp
PRODSECBUG-2346: Stored cross-site scripting in the admin panel
2019-06-25 00:00:00
veracode
veracode
Cross-site Scripting (XSS)
2019-08-07 05:40:56
cve
cve
CVE-2019-7927
2019-08-02 22:15:18
prion
prion
Cross site scripting
2019-08-02 22:15:00
github
github
Magento 2 Community Edition XSS Vulnerability
2022-05-24 16:52:27
cvelist
cvelist
CVE-2019-7927
2019-08-02 21:29:45
openvas
openvas