4415 matches found
CVE-2020-12635
XSS exists in the WebForms Pro M2 extension before 2.9.17 for Magento 2 via the textarea field...
CVE-2020-12635
XSS exists in the WebForms Pro M2 extension before 2.9.17 for Magento 2 via the textarea field...
CVE-2020-13423
Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2 admin accounts via the Currenturl or email field, or the User-Agent HTTP header...
Cross site scripting
XSS exists in the WebForms Pro M2 extension before 2.9.17 for Magento 2 via the textarea field...
Cross site scripting
Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2 admin accounts via the Currenturl or email field, or the User-Agent HTTP header...
CVE-2020-13423
Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2 admin accounts via the Currenturl or email field, or the User-Agent HTTP header...
CVE-2020-13423
CVE-2020-13423 concerns a cross-site scripting vulnerability in Form Builder 2.1.0 for Magento. The connected documents confirm that the issue enables XSS against Magento 2 admin accounts via input channels including the Current_url field, the email field, and the User-Agent HTTP header. The root...
CVE-2020-12635
XSS exists in the WebForms Pro M2 extension before 2.9.17 for Magento 2 via the textarea field...
CVE-2020-12635
WebForms Pro M2 extension for Magento 2 is affected by a cross-site scripting (XSS) vulnerability via the textarea field in versions prior to 2.9.17. Root cause reports indicate insufficient input validation on the client side. Impact is client-side code execution; exploit details are not provide...
Arbitrary Code Execution
magento/community-edition is vulnerable to arbitrary code execution. The vulnerability exists as through a command injection vulnerability...
Signature Verification Bypass
magento/community-edition is vulnerable to signature verification bypass. It is possible because of observable timing discrepancy...
Arbitrary Code Execution
magento/community-edition is vulnerable to arbitrary code execution. The vulnerability exists as through a command injection vulnerability...
Access Control Bypass
magento/community-edition is vulnerable to access control bypass. The vulnerability allows an attacker to bypass security mitigations which could potentially lead to arbitrary code execution...
Authorization Bypass
magento/community-edition is vulnerable to authorization bypass. The vulnerability exists as its defense-in-depth security mitigation does not restrict unauthorized access to the admin panel...
Privilege Escalation
magento/community-edition is vulnerable to privilege escalation. A business logic flaw allows an attacker to gain higher privileges...
Arbitrary Code Execution
magento/community-edition is vulnerable to arbitrary code execution. The vulnerability exists due to a security mitigation bypass weakness...
Arbitrary Code Execution
magento/community-edition is vulnerable to arbitrary code execution. The vulnerability exists through a security mitigation bypass weakness...
Cross-Site Scripting (XSS)
magento/community-edition is vulnerable to cross-site scripting XSS. Lack of sanitization of user-provided parameters allow an injection of malicious script which will be executed when the vulnerable page is loaded...
Arbitrary Code Execution
magento/community-edition is vulnerable to arbitrary code execution. A successful exploitation allows an attacker to inject and execute arbitrary commands on the system...