Cross-site Scripting (XSS)

magento/community-edition is vulnerable to cross-site scripting XSS. The vulnerability exists as a user with privileges to customer configurations to inject malicious javascript...