An authenticated user with privileges to the Checkbox Custom Option Value field on the Admin could use a stored cross-site scripting vulnerability to embed malicious code.

Part of update Magento 2.3.1, 2.2.8 and 2.1.17 Security Update

This vulnerability affects the following application versions:

  • Magento 2.3.0

Skriv et svar

Din e-mailadresse vil ikke blive publiceret. Krævede felter er markeret med *