Description
A reflected cross-site scripting vulnerability exists in the Product widget chooser functionality in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.
Remediation
References
Related Vulnerabilities
MySQL CVE-2020-2853 Vulnerability (CVE-2020-2853)
Joomla! Core 3.x.x Information Disclosure (3.7.0 - 3.8.1)
MySQL CVE-2021-2299 Vulnerability (CVE-2021-2299)
WordPress Plugin Contact Bank-Contact Form Builder for WordPress Unspecified Vulnerability (2.1.26)
Oracle Database Server CVE-2023-21949 Vulnerability (CVE-2023-21949)