Lucene search
+L

8 matches found

RedhatCVE
RedhatCVE
•added 2025/05/22 8:17 a.m.•18 views

CVE-2019-7867

A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to manage orders and order status...

4.8CVSS5.7AI score0.00557EPSS
SaveExploits0References1
OSV
OSV
•added 2022/05/24 4:52 p.m.•44 views

GHSA-VX2G-F45P-J674 Magento 2 Community Edition XSS Vulnerability

A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to manage orders and order status...

4.8CVSS4.9AI score0.00557EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2022/05/24 4:52 p.m.•26 views

Magento 2 Community Edition XSS Vulnerability

A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to manage orders and order status...

4.8CVSS5.9AI score0.00557EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2019/08/02 10:15 p.m.•31 views

CVE-2019-7877

A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to manage orders can inject malicious javascript...

6.1CVSS5.8AI score0.00846EPSS
SaveExploits0References2
NVD
NVD
•added 2019/08/02 10:15 p.m.•24 views

CVE-2019-7867

A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to manage orders and order status...

4.8CVSS4.7AI score0.00557EPSS
SaveExploits0References1
Prion
Prion
•added 2019/08/02 10:15 p.m.•25 views

Cross site scripting

A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This can be exploited by an authenticated user with access to manage orders and order status...

3.5CVSS4.7AI score0.00557EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
•added 2019/08/02 9:19 p.m.•32 views

CVE-2019-7877

A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with privileges to manage orders can inject malicious javascript...

6.1AI score0.00846EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2019/08/02 12:00 a.m.•4 views

PT-2019-18801

Name of the Vulnerable Software and Affected Versions Magento 2.1 versions prior to 2.1.18 Magento 2.2 versions prior to 2.2.9 Magento 2.3 versions prior to 2.3.2 Description A stored cross-site scripting issue exists in the admin panel. An authenticated user with privileges to manage orders can...

6.1CVSS0.00846EPSS
SaveExploits0References8
Rows per page
Query Builder