EUVD-2022-2513

Malicious code in bioql PyPI...

CVE-2021-41236

OroPlatform is a PHP Business Application Platform. In affected versions the email template preview is vulnerable to XSS payload added to email template content. An attacker must have permission to create or edit an email template. For successful payload, execution the attacked user must preview ...

PT-2022-11376

Name of the Vulnerable Software and Affected Versions OroPlatform affected versions not specified Description The email template preview in OroPlatform is vulnerable to XSS payload added to email template content. An attacker must have permission to create or edit an email template. For successfu...

CVE-2021-41236: Improper Neutralization of Input During Web Page Generation

OroPlatform is a PHP Business Application Platform. In affected versions the email template preview is vulnerable to XSS payload added to email template content. An attacker must have permission to create or edit an email template. For successful payload, execution the attacked user must preview ...

CVE-2019-8092

A reflected cross-site scripting XSS vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code via email template preview...

CVE-2019-8092: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting XSS vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary JavaScript code via email template preview...

PT-2019-18880

Name of the Vulnerable Software and Affected Versions Magento 2.2 versions prior to 2.2.10 Magento 2.3 versions prior to 2.3.3 or 2.3.2-p1 Description A reflected cross-site scripting XSS issue exists, allowing an authenticated user to inject arbitrary JavaScript code via email template preview...