Beveiligingsadvies

CVE-2021-21029

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-02-11 19:29:32

Laatst bijgewerkt 2024-09-16 22:20:24

Toegewezen door adobe

CVSS-score 4.8

Status PUBLISHED

Beschrijving

Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are affected by a Reflected Cross-site Scripting vulnerability via 'file' parameter. Successful exploitation could lead to arbitrary JavaScript execution in the victim's browser. Access to the admin console is required for successful exploitation.

← Alle CVE's bekijken Bekijk op cve.org ↗