CVE-2019-7944

CVE-2019-7944 : A stored cross-site scripting (XSS) vulnerability exists in the product comments field of Magento products. The underlying issue allows an authenticated user with privileges to the Return Product comments field to inject malicious JavaScript. Affected versions include Magento Open...