https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T13:32:51.716657+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/certfr-2019-avi-492 certfr-2019-avi-492 — De multiples vulnérabilités ont été découvertes dans les produits Magento. Certaines d'entre elles permettent à un atta… 2026-10-18T13:32:51.803208+00:00 certfr-2019-avi-492 https://cve.radiocsirt.org/vuln/cnvd-2019-40736 cnvd-2019-40736 2026-10-18T13:32:51.803256+00:00 cnvd-2019-40736 https://cve.radiocsirt.org/vuln/euvd-2026-51937 EUVD-2026-51937 2026-10-18T13:32:51.803272+00:00 EUVD-2026-51937 https://cve.radiocsirt.org/vuln/fkie_cve-2019-8152 fkie_cve-2019-8152 2026-10-18T13:32:51.803283+00:00

A stored cross-site scripting (XSS) vulnerability exists in in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with access to the wysiwyg editor can abuse the blockDirective() function and inject malicious javascript in the cache of the admin dashboard.

 https://cve.radiocsirt.org/vuln/ghsa-jjmg-xmq2-g6ff GHSA-jjmg-xmq2-g6ff — Magento 2 Community Edition XSS Vulnerability 2026-10-18T13:32:51.803312+00:00

Affected: Packagist: magento/community-edition

A stored cross-site scripting (XSS) vulnerability exists in in Magento 1 prior to 1.9.4.3 and 1.14.4.3, Magento 2.2 prior to 2.2.10, Magento 2.3 prior to 2.3.3 or 2.3.2-p1. An authenticated user with access to the wysiwyg editor can abuse the `blockDirective()` function and inject malicious javascript in the cache of the admin dashboard.

As per [the Magento Release 2.3.3](https://web.archive.org/web/20201126132230/https://devdocs.magento.com/guides/v2.3/release-notes/release-notes-2-3-3-commerce.html#new-security-only-patch-available), if you have already implemented the pre-release version of this patch (2.3.2-p1), it is highly recommended to promptly upgrade to 2.3.2-p2.

 https://cve.radiocsirt.org/vuln/gsd-2019-8152 gsd-2019-8152 2026-10-18T13:32:51.803341+00:00 gsd-2019-8152