Skip to content

Vulnerabilities of n/a Magento 1 Magento 2

Is your version affected?

CVE Summary Score Published
CVE-2019-7947 A cross-site request forgery vulnerability exists in the GiftCardAccount removal feature for Magento Open Source prior… Not rated Aug 2, 2019
CVE-2019-7945 A stored cross-cite scripting vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior… Not rated Aug 2, 2019
CVE-2019-7944 A stored cross-site scripting vulnerability exists in the product comments field of Magento Open Source prior to… Not rated Aug 2, 2019
CVE-2019-7940 A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and… Not rated Aug 2, 2019
CVE-2019-7938 A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and… Not rated Aug 2, 2019
CVE-2019-7935 A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and… Not rated Aug 2, 2019
CVE-2019-7934 A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and… Not rated Aug 2, 2019
CVE-2019-7932 A remote code execution vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to… Not rated Aug 2, 2019
CVE-2019-7911 A server-side request forgery (SSRF) vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento… Not rated Aug 2, 2019
CVE-2019-7909 A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and… Not rated Aug 2, 2019
CVE-2019-7899 Names of disabled downloadable products could be disclosed due to inadequate validation of user input in Magento Open… Not rated Aug 2, 2019
CVE-2019-7898 Samples of disabled downloadable products are accessible in Magento Open Source prior to 1.9.4.2, and Magento Commerce… Not rated Aug 2, 2019
CVE-2019-7897 A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and… Not rated Aug 2, 2019
CVE-2019-7889 An injection vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2,… Not rated Aug 2, 2019
CVE-2019-7887 A reflected cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and… Not rated Aug 2, 2019
CVE-2019-7882 A stored cross-site scripting vulnerability exists in the WYSIWYG editor of Magento Open Source prior to 1.9.4.2, and… Not rated Aug 2, 2019
CVE-2019-7875 A stored cross-site scripting vulnerability exists in the admin panel of Magento Open Source prior to 1.9.4.2, and… Not rated Aug 2, 2019
CVE-2019-7849 A defense-in-depth check was added to mitigate inadequate session validation handling by 3rd party checkout modules Not rated Aug 2, 2019

Other n/a products