https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 18:27:51 +0000 https://cve.radiocsirt.org/vuln/bdu:2020-05133 bdu:2020-05133 https://cve.radiocsirt.org/vuln/bdu:2020-05133 https://cve.radiocsirt.org/vuln/bit-magento-2020-24408 <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by a persistent XSS vulnerability that allows users to upload malicious JavaScript via the file upload component. This vulnerability could be abused by an unauthenticated attacker to execute XSS attacks against other Magento users. This vulnerability requires a victim to browse to the uploaded file.</p> <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by a persistent XSS vulnerability that allows users to upload malicious JavaScript via the file upload component. This vulnerability could be abused by an unauthenticated attacker to execute XSS attacks against other Magento users. This vulnerability requires a victim to browse to the uploaded file.</p> https://cve.radiocsirt.org/vuln/bit-magento-2020-24408 https://cve.radiocsirt.org/vuln/certfr-2020-avi-648 certfr-2020-avi-648 https://cve.radiocsirt.org/vuln/certfr-2020-avi-648 https://cve.radiocsirt.org/vuln/cnvd-2020-57886 cnvd-2020-57886 https://cve.radiocsirt.org/vuln/cnvd-2020-57886 https://cve.radiocsirt.org/vuln/euvd-2026-183051 EUVD-2026-183051 https://cve.radiocsirt.org/vuln/euvd-2026-183051 https://cve.radiocsirt.org/vuln/fkie_cve-2020-24408 <p>Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by a persistent XSS vulnerability that allows users to upload malicious JavaScript via the file upload component. This vulnerability could be abused by an unauthenticated attacker to execute XSS attacks against other Magento users. This vulnerability requires a victim to browse to the uploaded file.</p> <p>Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by a persistent XSS vulnerability that allows users to upload malicious JavaScript via the file upload component. This vulnerability could be abused by an unauthenticated attacker to execute XSS attacks against other Magento users. This vulnerability requires a victim to browse to the uploaded file.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2020-24408 https://cve.radiocsirt.org/vuln/ghsa-jxjc-6xmh-h7mg <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by a persistent XSS vulnerability that allows users to upload malicious JavaScript via the file upload component. This vulnerability could be abused by an unauthenticated attacker to execute XSS attacks against other Magento users. This vulnerability requires a victim to browse to the uploaded file.</p> <p><strong>Affected:</strong> Packagist: magento/community-edition</p> <p>Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by a persistent XSS vulnerability that allows users to upload malicious JavaScript via the file upload component. This vulnerability could be abused by an unauthenticated attacker to execute XSS attacks against other Magento users. This vulnerability requires a victim to browse to the uploaded file.</p> https://cve.radiocsirt.org/vuln/ghsa-jxjc-6xmh-h7mg https://cve.radiocsirt.org/vuln/gsd-2020-24408 gsd-2020-24408 https://cve.radiocsirt.org/vuln/gsd-2020-24408