Description
OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scripting vulnerability in the Dataflow profile run page, which inserts catalog product import row errors into the page without escaping. Unauthenticated attackers can place markup in the store, type, or attribute_set columns of an import file to run script in the session of the administrator who imports it.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OpenMage | magento-lts | < 20.18.2, 21.0.0-beta1 – < 21.0.0-beta3 | 20.18.2 |
References
- GitHub Security Advisory (GHSA-28hq-mq6h-fh2x) vendor-advisory
- Patch Commit patch
- VulnCheck Advisory: OpenMage magento-lts before 20.18.2 Stored XSS via Dataflow Import Row Errors third-party-advisory