Detections
Analytics
CVE-2019-7862
medium
Description
A reflected cross-site scripting vulnerability exists in the Product widget chooser functionality in the admin panel for Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2.
References
https://magento.com/security/patches/magento-2.3.2-2.2.9-and-2.1.18-security-update-13