Executive brief
Magento DOM-based Cross-site scripting vulnerability
Affected products
- Packagist magento/community-edition
- Packagist magento/project-community-edition
Junglewise Threat Intelligence
CVE-2020-9691: Magento DOM-based Cross-site scripting vulnerability
CVE-2020-9691 · Severity: low · CVSS 3.1 · Published 2022-05-24
Technologies: magento/community-edition (Packagist), magento/project-community-edition (Packagist). Vendors: Packagist.
Related threats
- Magento Open Source Security Advisory: Patch SUPEE-10975
- Magento Patch SUPEE-9652 - Remote Code Execution using mail vulnerability
- Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities
- Magento Patch SUPEE-10752 - Multiple security enhancements vulnerabilities
- Magento 2 Community Edition RCE via Unsafe File Upload