Security Advisory

CVE-2019-7939

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2019-08-02 21:33:20

Last updated 2024-08-04 21:02:19

Assigner adobe

CVSS score not scored

State PUBLISHED

Description

A reflected cross-site scripting vulnerability exists on the customer cart checkout page of Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. This could be exploited by sending a victim a crafted URL that results in malicious javascript execution in the victim's browser.

← Browse all CVEs View on cve.org ↗