-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| magento/community-edition | composer | >= 2.1.0, < 2.1.18 | 2.1.18 |
| magento/community-edition | composer | >= 2.2.0, < 2.2.9 | 2.2.9 |
| magento/community-edition | composer | >= 2.3.0, < 2.3.2 | 2.3.2 |
Miggo AIRoot Cause AnalysisThe vulnerability involves stored XSS in product content editing. Core attack vectors would be: 1) Input handling during product save (Controller) without sanitization, and 2) Output rendering in admin templates without escaping. While exact patch details are unavailable, Magento's product editing flow suggests these components are critical for content handling. Confidence is medium due to lack of direct code references, but aligns with Magento's architecture and XSS patterns.