Description
A stored cross-site scripting (XSS) vulnerability exists in Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user can exploit it by injecting an embedded expression into a translation.
Remediation
References
Related Vulnerabilities
WordPress Plugin 2Way VideoCalls and Random Chat-HTML5 Webcam Videochat Cross-Site Scripting (5.2.7)
OpenSSL Other Vulnerability (CVE-2015-0207)
WordPress Plugin Accept Donations with PayPal Cross-Site Request Forgery (1.3)
Drupal CVE-2017-6919 Vulnerability (CVE-2017-6919)
WordPress Plugin wptf-image-gallery Arbitrary File Download (1.0.3)