Description
Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have XSS via e-mail templates that are mishandled during a preview, aka APPSEC-1503.
Unscored
CVE-2016-10704
EUVD-2016-1704GHSA-wgvc-264r-g652
Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have XSS via e-mail templates that are mishandled dur…
Published Dec 30, 2017 · Updated Sep 16, 2024 · Assigned by mitre