CVE-2024-41676CWE-79

Magento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configs

Medium · published July 29, 2024

CVSS v3.1
4.1
EPSS
0%
Percentile
28.7
In the wild
Unconfirmed
What it is

Magento-lts is a long-term support alternative to Magento Community Edition (CE). This XSS vulnerability affects the design/header/welcome, design/header/logo_src, design/header/logo_src_small, and design/header/logo_alt system configs.They are intended to enable admins to set a text in the two cases, and to define an image url for the other two cases.

But because of previously missing escaping allowed to input arbitrary html and as a consequence also arbitrary JavaScript. The problem is patched with Version 20.10.1 or higher.

The record
Technical detail
CVSS v3.1
4.1 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:N/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00361 · 28.7th percentile
Weakness
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
Published
2024-07-29T14:46Z
EPSS history
Timeline
  • 29 JUL 14:46Z
    Magento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configs
    cvelistv5