{"id":"CVE-2020-3758","details":"Magento versions 2.3.3 and earlier, 2.2.10 and earlier, 1.14.4.3 and earlier, and 1.9.4.3 and earlier have a stored cross-site scripting vulnerability. Successful exploitation could lead to sensitive information disclosure.","aliases":["BIT-magento-2020-3758","GHSA-p5q3-xg47-653m"],"modified":"2026-09-13T03:45:41.477659475Z","published":"2020-01-29T19:15:14.087Z","database_specific":{"unresolved_ranges":[{"vendor_product":"magento:magento","cpes":["cpe:2.3:a:magento:magento:*:*:*:*:community:*:*:*","cpe:2.3:a:magento:magento:*:*:*:*:enterprise:*:*:*"],"extracted_events":[{"last_affected":"1.9.4.3"},{"last_affected":"1.9.4.3"},{"last_affected":"1.14.4.3"},{"last_affected":"1.14.4.3"}],"source":"CPE_RANGE"}]},"references":[{"type":"FIX","url":"https://helpx.adobe.com/security/products/magento/apsb20-02.html"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/magento/devdocs","events":[{"introduced":"239bfc72e116f6814ff6c2f6731f0830f3bcf61c"},{"last_affected":"382aaf5c828f60173e61fafa0e16e42016f5deb7"},{"introduced":"7e5889b3c30aab4c81e9b0d91d60733cf04d66c9"},{"last_affected":"439af32eeae5ef1ef719b6bbbe4c2f916d296e4b"}],"database_specific":{"extracted_events":[{"introduced":"2.2.0"},{"last_affected":"2.2.10"},{"introduced":"2.3.0"},{"last_affected":"2.3.3"}],"source":"CPE_RANGE","cpe":["cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*","cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*"]}}],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-3758.json"}},{"ranges":[{"type":"GIT","repo":"https://github.com/magento/magento2","events":[{"introduced":"07465f8ce879ff0bd0ba72a662c9e2473e49afe4"},{"last_affected":"2dd1e1a37a798fd7fd08d6894eb37bcccc99d1c6"},{"introduced":"f4c1d7526f05bdfb1327b0701cc345f94aadcaed"},{"last_affected":"7aa94564d85e408baea01abc5315a0441401c375"}],"database_specific":{"source":"CPE_RANGE","cpe":["cpe:2.3:a:magento:magento:*:*:*:*:commerce:*:*:*","cpe:2.3:a:magento:magento:*:*:*:*:open_source:*:*:*"],"extracted_events":[{"introduced":"2.2.0"},{"last_affected":"2.2.10"},{"introduced":"2.3.0"},{"last_affected":"2.3.3"}]}}],"versions":["2.3.3","2.3.2","2.3.1","2.3.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-3758.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}