Package · Packagist

magneto/core

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

Medium 6.1

CVE-2020-3758

Magento stored cross-site scripting vulnerability

Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

Adobe Magento magento/community-edition magneto/core Web / CMS Packagist

Jan 29, 2020
Critical 9.8

CVE-2020-3718

Magento security bypass vulnerability

Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a security bypass vulnerability. Successful exploitation could lead to arbitrary code execution.

Adobe Magento magento/community-edition magneto/core Web / CMS Packagist

Jan 29, 2020