BSS Multiwishlist XSS Injection

December 5, 2019December 12, 20194 years ago Niko 6229 Views 0 Comments CWE-79, magento2, xss-injection min read

This time I have been moving to weird and good Magento 2 world. How is it good? I have noticed (at least on those modules I’ve gone trough) there is a lot less issues in

Magento 1 PHP Programming

Magento 1: Netreviews/Avisverifies Security Flaw

July 21, 2019July 24, 20194 years ago Niko 6460 Views 0 Comments CWE-79, CWE-915, magento1, object-injection, security min read

After browsing again Magevulndb repository I encountered issue and PR open due original reporter have went 404. So I decided to give some help for these guys! Anyways, everybody wins when issues are reported. Discovering