Lucene search
GoogleOSV:CVE-2021-28556HistoryJun 28, 2021 - 2:15 p.m.
CVE-2021-28556
2021-06-2814:15:09
Google
osv.dev
7
magento
cross-site scripting
vulnerability
user interaction
unauthenticated attacker
javascript execution
Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a DOM-based Cross-Site Scripting vulnerability on mage-messages cookies. Successful exploitation could lead to arbitrary JavaScript execution by an unauthenticated attacker. User interaction is required for successful exploitation.
Related
cvelist
cvelist
cve
cve
CVE-2021-28556
2021-06-28 14:15:09
github
github
osv
osv
BIT-magento-2021-28556
2024-03-06 10:59:08
prion
prion
Cross site scripting
2021-06-28 14:15:00
nvd
nvd
CVE-2021-28556
2021-06-28 14:15:09
adobe
adobe
APSB21-30 Security updates available for Magento
2021-05-11 00:00:00