Miggo Logo
Miggo Vulnerability Database
→
CVE-2023-22249

CVE-2023-22249: Magento Open Source allows Cross-Site Scripting (XSS)

4.8

CVSS Score
3.1

Basic Information

CVE ID
CVE-2023-22249
GHSA ID
GHSA-fxcr-gvcw-hmqm
EPSS Score
0.94477%
CWE
CWE-79
Published
7/6/2023
Updated
3/4/2025
KEV Status
No
Technology
TechnologyPHP

Technical Details

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N
Package NameEcosystemVulnerable VersionsFirst Patched Version
magento/community-editioncomposer= 2.4.4
magento/community-editioncomposer= 2.4.5
magento/community-editioncomposer>= 2.4.4-p1, <= 2.4.4-p2
magento/community-editioncomposer= 2.4.5-p1

Vulnerability Intelligence
Miggo AIMiggo AI

Miggo AIRoot Cause Analysis:
In progress

WAF Protection Rules

WAF Rule

**o** *omm*r** v*rsions *.*.*-p* (*n* **rli*r) *n* *.*.*-p* (*n* **rli*r) *r* *****t** *y * stor** *ross-Sit* S*riptin* (XSS) vuln*r**ility t**t *oul* ** **us** *y * *i**-privil**** *tt**k*r to inj**t m*li*ious s*ripts into vuln*r**l* *orm *i*l*s. M*

Reasoning

No *n*lysis *v*il**l*