Cross-site Scripting (XSS)

magento/community-edition is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of sanitization of node attributes...

Cross-site Scripting (XSS)

magento/community-edition is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of sanitization on the product content pages...

Cross-site Scripting (XSS)

magento/community-edition is vulnerable to cross-site scripting XSS. The vulnerability exists due to the lack of sanitization in content block titles...

Cross-site Scripting (XSS)

magento/community-edition is vulnerable to cross-site scripting XSS. The vulnerability exists due to the lack of sanitization on authenticated users' ability to store product attributes...

Cross-site Scripting (XSS)

magento/community-edition is vulnerable to cross-site scripting XSS. The vulnerability exists as there is a lack of sanitization on the URL...

Magento Information Disclosure Vulnerability (CNVD-2019-26252)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. An information disclosure vulnerability exists in Magento version 2.1 before 2.1.18, version 2.2 before 2.2.9, an...

Magento Information Disclosure Vulnerability (CNVD-2019-26225)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. An information disclosure vulnerability exists in Magento version 2.1 before 2.1.18, version 2.2 before 2.2.9, an...

Magento Cross-Site Scripting Vulnerability (CNVD-2019-26251)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. A cross-site scripting vulnerability exists in Magento version 2.1.18 before version 2.1, 2.2.9 before version 2.2...

Magento Cross-Site Request Forgery Vulnerability (CNVD-2019-25993)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site request forgery vulnerability exists in Magento versions 2.1.18 before 2.1, 2.2.9 before 2.2.2 and...

Magento Cross-Site Request Forgery Vulnerability (CNVD-2019-26325)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site request forgery vulnerability exists in Magento versions 2.1.18 before 2.1, 2.2.9 before 2.2.2 and...

Magento encryption issue vulnerability (CNVD-2019-40841)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. An encryption issue vulnerability exists in Magento version 2.1 before 2.1.18, version 2.2 before 2.2.9, and...

Magento Cross-Site Request Forgery Vulnerability (CNVD-2019-26250)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions . A cross-site request forgery vulnerability exists in Magento versions 2.1.18 before 2.1, 2.2.9 before 2.2.2 and...

Magento Path Traversal Vulnerability

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A path traversal vulnerability exists in Magento versions 2.1.18 before 2.1, 2.2.9 before 2.2.2, and 2.3.2 before...

Magento cross-site scripting vulnerability (CNVD-2019-25992)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions . A cross-site scripting vulnerability exists in Magento version 2.1.18 before version 2.1, 2.2.9 before version 2...

Magento encryption issue vulnerability (CNVD-2019-40840)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions . An encryption issue vulnerability exists in Magento version 2.1 before 2.1.18, version 2.2 before 2.2.9, and...

Magento Information Disclosure Vulnerability (CNVD-2019-26224)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. An information disclosure vulnerability exists in Magento version 2.1 before 2.1.18, version 2.2 before 2.2.9, an...

Magento Station Request Forgery Vulnerability

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions. A cross-site request forgery vulnerability exists in Magento versions 2.1.18 before 2.1, 2.2.9 before 2.2.2 and...

Magento Permission License and Access Control Issues Vulnerability

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions . A vulnerability exists in version 2.1 before Magento 2.1.18, version 2.2 before Magento 2.2.9, and version 2.3...

Magento Cross-Site Scripting Vulnerability (CNVD-2019-26248)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engines and payment gateways and other functions . A cross-site scripting vulnerability exists in Magento version 2.1.18 before version 2.1, 2.2.9 before version 2...

Magento Information Disclosure Vulnerability (CNVD-2019-26226)

Magento is an open source PHP e-commerce system of the United States Magento company . The system provides rights management , search engine and payment gateway and other functions. An information disclosure vulnerability exists in Magento version 2.1 before 2.1.18, version 2.2 before 2.2.9, and...