Description
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can exploit it by injecting malicious Javascript into the name of main website.
Remediation
References
Related Vulnerabilities
WebLogic Deserialization of Untrusted Data Vulnerability (CVE-2019-17267)
XWikiplatform Missing Authorization Vulnerability (CVE-2024-37898)
WordPress 3.8.1 Multiple Vulnerabilities (3.8 - 3.8.1)
WordPress Plugin WP Visitor Statistics (Real Time Traffic) SQL Injection (4.7)
WordPress Plugin WP Hardening-Fix Your WordPress Security Cross-Site Scripting (1.2.1)