Magento Mass Importer
100%
Total Score
100
100
100
| Title | Versions | Severity |
|---|---|---|
CVE-2017-7391 dweeves/magmi is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 0.7.22. | 0.0.0 - 0.7.22 | Medium |
CVE-2014-8770 dweeves/magmi is vulnerable to Improper Control of Generation of Code ('Code Injection') in versions 0.0.0 - 0.7.17a. | 0.0.0 - 0.7.17a | Critical |
CVE-2015-2068 dweeves/magmi is vulnerable to Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in versions 0.0.0 - 0.7.22. | 0.0.0 - 0.7.22 | Medium |
CVE-2015-2067 dweeves/magmi is vulnerable to Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in versions 0.0.0 - 0.7.21. | 0.0.0 - 0.7.21 | Medium |
CVE-2020-5776 dweeves/magmi is vulnerable to Cross-Site Request Forgery (CSRF) in versions 0.0.0 - 0.7.24. | 0.0.0 - 0.7.24 | High |
No direct dependencies.
Secure your code, cloud, and runtime environments in one central system. Find and fix vulnerabilities automatically.
No credit card required | Scan results in 32secs.
SOC 2Compliant
ISO 27001Compliant