-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| magento/community-edition | composer | >= 2.2, < 2.2.10 | 2.2.10 |
| magento/community-edition | composer | >= 2.3, < 2.3.2-p1 | 2.3.2-p1 |
Miggo AIRoot Cause AnalysisThe vulnerability description indicates improper input sanitization in error handling related to downloadable links. The LinkSave controller is the primary handler for downloadable link operations in the admin panel. In Magento's architecture, controller actions typically process user input and handle validation errors. The combination of user-controlled input being used in error messages (without escaping) and the XSS nature of the vulnerability strongly points to this controller's error handling flow as the vulnerable path. This matches the pattern described where authenticated users can trigger XSS through manipulated downloadable link parameters.
A Semantic Attack on Google Gemini - Read the Latest Research