Lucene search
+L

6 matches found

osv_ghsa
osv_ghsa
•added 2022/05/24 4:52 p.m.•33 views

GHSA-M3V2-R236-5XGQ Magento 2 Community Edition XSS Vulnerability

A reflected cross-site scripting vulnerability exists in the Product widget chooser functionality in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2...

4.8CVSS5AI score0.00557EPSS
SaveExploits0References5
Github Security Blog
Github Security Blog
•added 2022/05/24 4:52 p.m.•35 views

Magento 2 Community Edition XSS Vulnerability

A reflected cross-site scripting vulnerability exists in the Product widget chooser functionality in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2...

4.8CVSS6.1AI score0.00557EPSS
SaveExploits0References5Affected Software1
NVD
NVD
•added 2019/08/02 10:15 p.m.•35 views

CVE-2019-7862

A reflected cross-site scripting vulnerability exists in the Product widget chooser functionality in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2...

4.8CVSS4.8AI score0.00557EPSS
SaveExploits0References1
Prion
Prion
•added 2019/08/02 10:15 p.m.•28 views

Cross site scripting

A reflected cross-site scripting vulnerability exists in the Product widget chooser functionality in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2...

3.5CVSS4.8AI score0.00557EPSS
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2019/08/02 12:00 a.m.•8 views

PT-2019-18787

Name of the Vulnerable Software and Affected Versions Magento 2.1 versions prior to 2.1.18 Magento 2.2 versions prior to 2.2.9 Magento 2.3 versions prior to 2.3.2 Description A reflected cross-site scripting issue exists in the Product widget chooser functionality in the admin panel...

4.8CVSS0.00557EPSS
SaveExploits0References8
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2019/08/02 12:00 a.m.•5 views

CVE-2019-7862: Improper Neutralization of Input During Web Page Generation

A reflected cross-site scripting vulnerability exists in the Product widget chooser functionality in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2...

4.8CVSS8.1AI score0.00557EPSS
SaveExploits0References2
Rows per page
Query Builder