<?xml version='1.0' encoding='UTF-8'?>
<?xml-stylesheet href="/static/style.xsl" type="text/xsl"?>
<rss xmlns:atom="http://www.w3.org/2005/Atom" xmlns:content="http://purl.org/rss/1.0/modules/content/" version="2.0">
  <channel>
    <title>Most recent entries from all</title>
    <link>https://cve.radiocsirt.org</link>
    <description>Contains only the most 10 recent entries.</description>
    <docs>http://www.rssboard.org/rss-specification</docs>
    <generator>python-feedgen</generator>
    <language>en</language>
    <lastBuildDate>Wed, 21 Oct 2026 16:40:49 +0000</lastBuildDate>
    <item>
      <title>certfr-2019-avi-295 — De multiples vulnérabilités ont été découvertes dans les produits
Magento. Certaines d'entre elles permettent à un atta…</title>
      <link>https://cve.radiocsirt.org/vuln/certfr-2019-avi-295</link>
      <description>certfr-2019-avi-295</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/certfr-2019-avi-295</guid>
    </item>
    <item>
      <title>EUVD-2026-51711</title>
      <link>https://cve.radiocsirt.org/vuln/euvd-2026-51711</link>
      <description>EUVD-2026-51711</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/euvd-2026-51711</guid>
    </item>
    <item>
      <title>fkie_cve-2019-7889</title>
      <link>https://cve.radiocsirt.org/vuln/fkie_cve-2019-7889</link>
      <description>&lt;p&gt;An injection vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with marketing manipulation privileges can invoke methods that alter data of the underlying model followed by corresponding database modifications.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;An injection vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with marketing manipulation privileges can invoke methods that alter data of the underlying model followed by corresponding database modifications.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/fkie_cve-2019-7889</guid>
    </item>
    <item>
      <title>GHSA-hxmp-jcqj-83hm — Magento 2 Community Edition Injection Vulnerability</title>
      <link>https://cve.radiocsirt.org/vuln/ghsa-hxmp-jcqj-83hm</link>
      <description>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Packagist: magento/community-edition&lt;/p&gt;
&lt;p&gt;An injection vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with marketing manipulation privileges can invoke methods that alter data of the underlying model followed by corresponding database modifications.&lt;/p&gt;</description>
      <content:encoded>&lt;p&gt;&lt;strong&gt;Affected:&lt;/strong&gt; Packagist: magento/community-edition&lt;/p&gt;
&lt;p&gt;An injection vulnerability exists in Magento Open Source prior to 1.9.4.2, and Magento Commerce prior to 1.14.4.2, Magento 2.1 prior to 2.1.18, Magento 2.2 prior to 2.2.9, Magento 2.3 prior to 2.3.2. An authenticated user with marketing manipulation privileges can invoke methods that alter data of the underlying model followed by corresponding database modifications.&lt;/p&gt;</content:encoded>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/ghsa-hxmp-jcqj-83hm</guid>
    </item>
    <item>
      <title>gsd-2019-7889</title>
      <link>https://cve.radiocsirt.org/vuln/gsd-2019-7889</link>
      <description>gsd-2019-7889</description>
      <guid isPermaLink="false">https://cve.radiocsirt.org/vuln/gsd-2019-7889</guid>
    </item>
  </channel>
</rss>
