CVE-2020-9665
CVE-2020-9665
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.
CVSS 6.1 · Medium · EPSS 1.4%
- Published
- Updated
Stack: php
Affected products and versions
magento
- Versions
- 1.14.4.5 and earlier, and 1.9.4.5 and earlier versions: Affected
No fix published
magento/core Packagist
- Affected ranges
- ECOSYSTEM: ≤ 1.9.4.5
No fix published