CVE-2023-54423: OpenMage magento-lts before 20.2.0 Stored XSS via TinyMCE WYSIWYG Editor
OpenMage magento-lts before 20.2.0 contains a stored cross-site scripting vulnerability because the TinyMCE WYSIWYG editor fails to filter scripts in specially crafted HTML tags. Attackers can inject an img element with a malicious onmouseover attribute to execute scripts in the browsers of users viewing the rendered content.
Affected Software
Event History
Frequently Asked Questions
Who can exploit this issue?
An attacker needs high privileges and must be able to submit specially crafted HTML through the TinyMCE WYSIWYG editor. Exploitation also requires a user to interact with rendered malicious content, such as triggering an injected image element's onmouseover handler.
Which users are at risk from injected content?
Users who view the rendered content can have attacker-supplied script execute in their browser. The vulnerability can affect confidentiality, integrity, and availability in the context of the affected user's browser session.
What versions are affected?
OpenMage magento-lts versions before 20.2.0 are affected. Upgrading to 20.2.0 or later removes the affected version range described here.