CVE-2020-9577

Magento versions 2.3.4 and earlier, 2.2.11 and earlier see note, 1.14.4.4 and earlier, and 1.9.4.4 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure...

CVE-2020-9577

Magento CVE-2020-9577 describes a stored cross-site scripting vulnerability affecting Magento versions 2.3.4 and earlier, 2.2.11 and earlier, 1.14.4.4 and earlier, and 1.9.4.4 and earlier. The issue arises from improper handling of page structure, enabling an attacker to store and later trigger s...