https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T12:07:32.193008+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2021-03255 bdu:2021-03255 2026-10-05T12:07:32.272455+00:00 bdu:2021-03255 https://cve.radiocsirt.org/vuln/bit-magento-2021-28556 BIT-magento-2021-28556 — Magento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution 2026-10-05T12:07:32.272496+00:00

Affected: Bitnami: magento

Magento versions 2.4.2 (and earlier), 2.4.1 (and earlier) and 2.3.6 (and earlier) are affected by a DOM-based Cross-Site Scripting vulnerability on mage-messages cookies. Successful exploitation could lead to arbitrary JavaScript execution by an unauthenticated attacker. User interaction is required for successful exploitation.

 https://cve.radiocsirt.org/vuln/certfr-2021-avi-376 certfr-2021-avi-376 — De multiples vulnérabilités ont été découvertes dans Magento. Elles permettent à un attaquant de provoquer un contourne… 2026-10-05T12:07:32.272532+00:00 certfr-2021-avi-376 https://cve.radiocsirt.org/vuln/euvd-2026-181413 EUVD-2026-181413 2026-10-05T12:07:32.272560+00:00 EUVD-2026-181413 https://cve.radiocsirt.org/vuln/fkie_cve-2021-28556 fkie_cve-2021-28556 2026-10-05T12:07:32.272609+00:00

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a DOM-based Cross-Site Scripting vulnerability on mage-messages cookies. Successful exploitation could lead to arbitrary JavaScript execution by an unauthenticated attacker. User interaction is required for successful exploitation.

 https://cve.radiocsirt.org/vuln/ghsa-39ch-rg26-gmq5 GHSA-39ch-rg26-gmq5 — Magento DOM-based Cross-Site Scripting vulnerability on mage-messages cookies 2026-10-05T12:07:32.272632+00:00

Affected: Packagist: magento/community-edition, Packagist: magento/project-community-edition

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a DOM-based Cross-Site Scripting vulnerability on mage-messages cookies. Successful exploitation could lead to arbitrary JavaScript execution by an unauthenticated attacker. User interaction is required for successful exploitation.

 https://cve.radiocsirt.org/vuln/gsd-2021-28556 gsd-2021-28556 2026-10-05T12:07:32.272655+00:00 gsd-2021-28556