EUVD-2022-4545

Malicious code in bioql PyPI...

Cross-site Scripting (XSS)

magento/community-edition is vulnerable to cross-site scripting XSS. The vulnerability exists due to the lack of sanitization in content block titles...

CVE-2019-7936: Improper Neutralization of Input During Web Page Generation

A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to modify content block titles to inject malicious javascript...