Magento 2 Community Edition XSS Vulnerability

A stored cross-site scripting vulnerability exists in the admin panel of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by an authenticated user with privileges to edit product content pages to inject malicious javascript...

Cross-site Scripting (XSS)

magento/community-edition is vulnerable to cross-site scripting XSS. The vulnerability exists through the lack of sanitization on the product content pages...

ourphp 1.5.0 /function/plugs/Comment/product-content.php 参数row SQL盲注漏洞

No description provided by source...