Description
A remote code execution vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An unauthenticated user can insert a malicious payload through PageBuilder template methods.
Remediation
References
Related Vulnerabilities
Joomla Incorrect Authorization Vulnerability (CVE-2020-11889)
WordPress Plugin Advanced Custom Fields (ACF) Information Disclosure (6.0.2)
WordPress Plugin WooCommerce BuddyPress Integration Unspecified Vulnerability (3.2.6.1)
WordPress Plugin Cartogiraffe Map Cross-Site Scripting (1.0)
PostgreSQL Improper Validation of Specified Type of Input Vulnerability (CVE-2026-2004)