CVE-2019-8139

State: Published
Severity: Not scored
Published: Nov 5, 2019
Updated: Aug 4, 2024
Reserved: Feb 12, 2019

Description

A stored cross-site scripting (XSS) vulnerability exists in Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can inject arbitrary Javascript code into the dynamic block when invoking page builder on a product.

Scores

The record has no CVSS score.

Weaknesses

The record names no weakness.

Affected Products

Product	Versions
Magento 2Adobe Systems Incorporated	Magento 2.3 prior to 2.3.3 or 2.3.2-p1Affected

References

https://magento.com/security/patches/magento-2.3.3-and-2.2.10-security-update

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.