Lucene search

K
prionPRIOn knowledge basePRION:CVE-2019-8120
HistoryNov 05, 2019 - 11:15 p.m.

Cross site scripting

2019-11-0523:15:00
PRIOn knowledge base
www.prio-n.com
3

0.001 Low

EPSS

Percentile

27.3%

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.1 prior to 2.1.19, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3. An authenticated user can inject arbitrary Javascript code by manipulating section of a POST request related to customer’s email address.

0.001 Low

EPSS

Percentile

27.3%