Lucene search
GoogleOSV:GHSA-XV69-F7X5-R4QWHistoryNov 12, 2019 - 10:59 p.m.
Magento Cross-Site Scripting via Attribute Set Name
2019-11-1222:59:43
Google
osv.dev
3
0.001 Low
EPSS
Percentile
27.3%
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code into the attribute set name when listing the products.
Related
nvd
nvd
CVE-2019-8145
2019-11-06 01:15:25
github
github
Magento Cross-Site Scripting via Attribute Set Name
2019-11-12 22:59:43
cve
cve
CVE-2019-8145
2019-11-06 01:15:25
cvelist
cvelist
CVE-2019-8145
2019-11-06 00:04:43
osv
osv
CVE-2019-8145
2019-11-06 01:15:00
prion
prion
Cross site scripting
2019-11-06 01:15:00
friendsofphp
friendsofphp
PRODSECBUG-2402: Cross-Site Scripting via Attribute Set Name
2019-10-08 00:00:00
openvas
openvas