Skip to content
OpenAdvisories
High · 7.5 CVE-2020-24416 EUVD-2020-17136GHSA-vmwg-3qr7-49hp

Blind stored XSS in Marketo Sales insight plugin for SalesForce

Published Oct 20, 2020 · Updated Sep 16, 2024 · Assigned by adobe

Description

Marketo Sales Insight plugin version 1.4355 (and earlier) is affected by a blind stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field.

Affected products

VendorProductAffectedFixed
Adobe Marketo unspecified – ≤ 1.4355, unspecified – ≤ None —

References