Skip to content

CVE record · 1 source

CVE-2023-54423

CVSS 7.5

OpenMage magento-lts before 20.2.0 contains a stored cross-site scripting vulnerability because the TinyMCE WYSIWYG editor fails to filter scripts in…

Vendor: OpenMage
Product: magento-lts
CVSS v3.1: 7.5 AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:L/A:L
Weakness: CWE-82

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

CVE NVD 11h ago

OpenMage magento-lts before 20.2.0 contains a stored cross-site scripting vulnerability because the TinyMCE WYSIWYG editor fails to filter scripts in…

OpenMage magento-lts before 20.2.0 contains a stored cross-site scripting vulnerability because the TinyMCE WYSIWYG editor fails to filter scripts in specially crafted HTML tags. Attackers can inject an img element with a…

CVSS 7.5 CVE-2023-54423 OpenMage