Miggo Logo
Miggo Vulnerability Database
→
CVE-2020-3758

CVE-2020-3758: Magento stored cross-site scripting vulnerability

6.1

CVSS Score
3.1

Basic Information

CVE ID
CVE-2020-3758
GHSA ID
GHSA-p5q3-xg47-653m
EPSS Score
0.51202%
CWE
CWE-79
Published
5/24/2022
Updated
1/11/2024
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
magento/community-editioncomposer>= 2.3.0, <= 2.3.32.3.4
magento/community-editioncomposer<= 2.2.102.2.11
magneto/corecomposer< 1.9.4.41.9.4.4

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

M***nto v*rsions *.*.* *n* **rli*r, *.*.** *n* **rli*r, *.**.*.* *n* **rli*r, *n* *.*.*.* *n* **rli*r **v* * stor** *ross-sit* s*riptin* vuln*r**ility. Su***ss*ul *xploit*tion *oul* l*** to s*nsitiv* in*orm*tion *is*losur*.

Reasoning

No *n*lysis *v*il**l*