1 matches found
GHSA-5PXH-89CX-4668 Magento LTS vulnerable to stored XSS in theme config fields
As reported by Aakash Adhikari, Github: @justlife4x4, the Design Themes Skin Images / CSS config field allows a Stored XSS when it contains an end script tag. Impact A malicious user with access to this configuration field could use a Stored XSS to affect other authenticated admin users in the...
2.9CVSS3.3AI score0.00256EPSS
SaveExploits0References6
20