Description
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can inject arbitrary JavaScript code when creating a content page via page builder.
Remediation
References
Related Vulnerabilities
Jboss EAP CVE-2011-1483 Vulnerability (CVE-2011-1483)
IBM RTC Improper Restriction of Rendered UI Layers or Frames Vulnerability (CVE-2020-4547)
WordPress Plugin wp-microblogs Cross-Site Scripting (0.4.0)
WordPress Plugin Ad Buttons Multiple Vulnerabilities (2.3.1)
WordPress Plugin WP Hotel Booking Cross-Site Request Forgery (1.10.1)