A reflected cross-site scripting vulnerability exists on the customer cart checkout page of Magento 2.1 before 2.1.18, Magento 2.2 before 2.2.9, Magento 2.3 before 2.3.2. This could be exploited by sending a victim a crafted URL that results in malicious javascript execution in the victim's browser.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
magento magento |