https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-10T18:27:57.586543+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/bdu:2020-05133 bdu:2020-05133 2026-10-10T18:27:57.591313+00:00 bdu:2020-05133 https://cve.radiocsirt.org/vuln/bit-magento-2020-24408 BIT-magento-2020-24408 — Stored XSS in customer address upload feature 2026-10-10T18:27:57.591348+00:00

Affected: Bitnami: magento

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by a persistent XSS vulnerability that allows users to upload malicious JavaScript via the file upload component. This vulnerability could be abused by an unauthenticated attacker to execute XSS attacks against other Magento users. This vulnerability requires a victim to browse to the uploaded file.

 https://cve.radiocsirt.org/vuln/certfr-2020-avi-648 certfr-2020-avi-648 — De multiples vulnérabilités ont été découvertes dans Magento. Certaines d'entre elles permettent à un attaquant de prov… 2026-10-10T18:27:57.591382+00:00 certfr-2020-avi-648 https://cve.radiocsirt.org/vuln/cnvd-2020-57886 cnvd-2020-57886 2026-10-10T18:27:57.591399+00:00 cnvd-2020-57886 https://cve.radiocsirt.org/vuln/euvd-2026-183051 EUVD-2026-183051 2026-10-10T18:27:57.591411+00:00 EUVD-2026-183051 https://cve.radiocsirt.org/vuln/fkie_cve-2020-24408 fkie_cve-2020-24408 2026-10-10T18:27:57.591421+00:00

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by a persistent XSS vulnerability that allows users to upload malicious JavaScript via the file upload component. This vulnerability could be abused by an unauthenticated attacker to execute XSS attacks against other Magento users. This vulnerability requires a victim to browse to the uploaded file.

 https://cve.radiocsirt.org/vuln/ghsa-jxjc-6xmh-h7mg GHSA-jxjc-6xmh-h7mg — Magento 2 Community Edition XSS Vulnerability 2026-10-10T18:27:57.591441+00:00

Affected: Packagist: magento/community-edition

Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by a persistent XSS vulnerability that allows users to upload malicious JavaScript via the file upload component. This vulnerability could be abused by an unauthenticated attacker to execute XSS attacks against other Magento users. This vulnerability requires a victim to browse to the uploaded file.

 https://cve.radiocsirt.org/vuln/gsd-2020-24408 gsd-2020-24408 2026-10-10T18:27:57.591461+00:00 gsd-2020-24408