GHSA-mcfc-67vm-j568

Magento Cross-Site Scripting (XSS) vulnerability

At a glance

Published: 2024-05-15 22:34 UTC
Updated: 2024-11-29 05:38 UTC

Description

Magento Commerce and Open Source 2.2.6 and 2.1.15 contain multiple security enhancements that help close Cross-Site Scripting (XSS) and other vulnerabilities.

Affected packages

Package	Versions
Packagist · magento/community-edition	introduced 2.1, fixed 2.1.15
Packagist · magento/community-edition	introduced 2.2, fixed 2.2.6

References

https://github.com/FriendsOfPHP/security-advisories/blob/master/magento/product-community-edition/2018-09-10.yaml WEB
https://github.com/magento/magento2 PACKAGE
https://web.archive.org/web/20210802082439/https://magento.com/security/patches/magento-2.2.6-and-2.1.15-security-update WEB

Sources

Source	Licence
OSV.dev	CC-BY 4.0 — GitHub Advisory Database