Lucene search

K
osvGoogleOSV:GHSA-XC4P-J89C-P7X5
HistoryMay 24, 2022 - 5:24 p.m.

Magento stored cross-site scripting vulnerability

2022-05-2417:24:11
Google
osv.dev
6

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.3%

Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
A patch SUPEE-11346 is available at Magento Open Source Download Page > Release Archive Tab > Magento Open Source Patches - 1.x Section

5.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

34.3%

Related for OSV:GHSA-XC4P-J89C-P7X5