CVE-2020-9665

published 2020-07-22

CVE-2020-9665: Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to…

medium 6.1 CVSS 3.1

AV N AC L PR N UI R S C C L I L A N

Magento versions 1.14.4.5 and earlier, and 1.9.4.5 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.

Affected

4 ranges

Vendor	Product	Version range	Fixed in
adobe	magento	—	—
magento	core	0 – 1.9.4.5	—
magento	magento	<= 1.9.4.5	—
magento	magento	<= 1.14.4.5	—

CWE-79