Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21015
HistoryAug 07, 2019 - 5:31 a.m.

Cross-site Scripting (XSS)

2019-08-0705:31:08
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
6

0.001 Low

EPSS

Percentile

27.3%

magento/community-edition is vulnerable to cross-site scripting (XSS). The vulnerability exists due to the lack of sanitization on authenticated users’ ability to store product attributes.

0.001 Low

EPSS

Percentile

27.3%