https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 15:13:44 +0000 https://cve.radiocsirt.org/vuln/bdu:2021-01094 bdu:2021-01094 https://cve.radiocsirt.org/vuln/bdu:2021-01094 https://cve.radiocsirt.org/vuln/bit-magento-2021-21019 <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento versions 2.4.1 (and earlier), 2.4.0 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in the Widgets module. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.</p> <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento versions 2.4.1 (and earlier), 2.4.0 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in the Widgets module. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.</p> https://cve.radiocsirt.org/vuln/bit-magento-2021-21019 https://cve.radiocsirt.org/vuln/certfr-2021-avi-100 certfr-2021-avi-100 https://cve.radiocsirt.org/vuln/certfr-2021-avi-100 https://cve.radiocsirt.org/vuln/cnvd-2021-13926 cnvd-2021-13926 https://cve.radiocsirt.org/vuln/cnvd-2021-13926 https://cve.radiocsirt.org/vuln/euvd-2026-181600 EUVD-2026-181600 https://cve.radiocsirt.org/vuln/euvd-2026-181600 https://cve.radiocsirt.org/vuln/fkie_cve-2021-21019 <p>Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in the Widgets module. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.</p> <p>Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in the Widgets module. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-21019 https://cve.radiocsirt.org/vuln/ghsa-mw95-gmw4-883p <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in the Widgets module. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to XML injection in the Widgets module. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation.</p> https://cve.radiocsirt.org/vuln/ghsa-mw95-gmw4-883p https://cve.radiocsirt.org/vuln/gsd-2021-21019 gsd-2021-21019 https://cve.radiocsirt.org/vuln/gsd-2021-21019