Description (CNA)
Form Builder 2.1.0 for Magento has multiple XSS issues that can be exploited against Magento 2 admin accounts via the Current_url or email field, or the User-Agent HTTP header.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://anothernetsecblog.com
- https://landofcoder.com/magento-2-form-builder.html
- https://anothernetsecblog.com/magento-2-extension-security/
ADP enrichment
No English description supplied.