CVE-2023-54423

OpenMage magento-lts versions before 20.2.0 are vulnerable to a stored cross-site scripting (XSS) flaw. The root cause is that the TinyMCE WYSIWYG editor fails to adequately filter scripts within specially crafted HTML tags. An attacker can inject an element containing a malicious onmouseover at...