Description
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated admin user can inject arbitrary JavaScript code when creating a content page via page builder.
Remediation
References
Related Vulnerabilities
WordPress Plugin Bird Feeder Multiple Vulnerabilities (1.2.3)
PHP Permissions, Privileges, and Access Controls Vulnerability (CVE-2007-3378)
WordPress Plugin Page Visit Counter SQL Injection (4.0.9)
TYPO3 Improper Input Validation Vulnerability (CVE-2013-4250)
WordPress Plugin U BuddyPress Forum Attachment 'fileurl' Parameter Remote File Disclosure (1.1.1)