Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/magento/community-edition@1.5.0%2B0
purl pkg:composer/magento/community-edition@1.5.0%2B0
Tags Ghost
Next non-vulnerable version 2.4.6-p9
Latest non-vulnerable version 2.4.9-alpha3
Risk score
Vulnerabilities affecting this package (6)
Advisory Summary Fixed in package version
GHSA-6wm4-3rjj-c8xx

Magento Security enhancements that help close RCE,XSS,CSRF and other vulnerabilities SUPEE-10975, Magento Commerce 1.14.4.0 and Open Source 1.9.4.0 contain multiple … There are no reported fixed by versions.
CVE-2019-8230

Improper Input Validation In Magento an authenticated user with administrative privileges to edit configuration settings can execute arbitrary code through … There are no reported fixed by versions.
CVE-2019-8232

Improper Input Validation In Magento an authenticated user with administrative privileges for the import feature can execute arbitrary code through …
2.2.10
Vulnerable
2.3.3
Vulnerable
CVE-2019-8152

Cross-site Scripting A stored cross-site scripting (XSS) vulnerability exists in in Magento. An authenticated user with access to the wysiwyg …
2.2.10
Vulnerable
2.3.3
Vulnerable
CVE-2019-8227

Cross-site Scripting In Magento an authenticated user with limited administrative privileges can inject arbitrary JavaScript code via import/export functionality when … There are no reported fixed by versions.
CVE-2019-8231

Improper Input Validation In Magento an authenticated user with administrative privileges for editing attribute sets can execute arbitrary code through … There are no reported fixed by versions.
This package is not known to fix any advisories.