https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-07T02:29:37.421676+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2021-28556 CVE-2021-28556 — Magento Commerce DOM-based cross-site scripting (XSS) could lead to arbitrary javascript execution 2026-10-07T02:29:37.442080+00:00

Affected: Adobe Magento Commerce

Magento versions 2.4.2 (and earlier), 2.4.1-p1 (and earlier) and 2.3.6-p1 (and earlier) are affected by a DOM-based Cross-Site Scripting vulnerability on mage-messages cookies. Successful exploitation could lead to arbitrary JavaScript execution by an unauthenticated attacker. User interaction is required for successful exploitation.