Packagist/magento/core CVE-2020-9581: medium 6.1, EPSS 1.50%

Magento stored cross-site scripting vulnerability

Action: Upgrade magento/core to 1.9.4.5 or later.

composer require magento/core:1.9.4.5

Affected

Fixed versions

Sources

• osv: GHSA-2w2x-7qgj-4x78#Packagist/magento/core
• https://nvd.nist.gov/vuln/detail/CVE-2020-9581
• https://github.com/magento/magento2/commit/52d92dbd07f09620d23693ba0c4d4bdb4ba09916
• https://github.com/magento/magento2
• https://helpx.adobe.com/security/products/magento/apsb20-22.html

CVE-2020-9581 · published 2022-05-24T17:21:48Z · modified 2025-02-10T20:31:23.374360Z · JSON