BSS Multiwishlist XSS Injection

December 5, 2019December 12, 20194 years ago Niko 6229 Views 0 Comments CWE-79, magento2, xss-injection min read

This time I have been moving to weird and good Magento 2 world. How is it good? I have noticed (at least on those modules I’ve gone trough) there is a lot less issues in

Magento 1 PHP Programming

Magento 1: BL/CustomGrid Security Flaw

July 24, 2019July 31, 20194 years ago Niko 9772 Views 2 Comments magento1, object-injection, security, xss-injection min read

As most of people can notice, I have been going trough Magento modules lately hunting for possible security flaws. This time I decided to review BL/CustomGrid, why? This module is not maintained for long time