https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 21:58:36 +0000 https://cve.radiocsirt.org/vuln/bdu:2022-01389 bdu:2022-01389 https://cve.radiocsirt.org/vuln/bdu:2022-01389 https://cve.radiocsirt.org/vuln/bit-magento-2021-36023 <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento Commerce versions 2.4.2 (and earlier), 2.4.2 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.</p> <p><strong>Affected:</strong> Bitnami: magento</p> <p>Magento Commerce versions 2.4.2 (and earlier), 2.4.2 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.</p> https://cve.radiocsirt.org/vuln/bit-magento-2021-36023 https://cve.radiocsirt.org/vuln/certfr-2021-avi-609 certfr-2021-avi-609 https://cve.radiocsirt.org/vuln/certfr-2021-avi-609 https://cve.radiocsirt.org/vuln/euvd-2026-219734 EUVD-2026-219734 https://cve.radiocsirt.org/vuln/euvd-2026-219734 https://cve.radiocsirt.org/vuln/fkie_cve-2021-36023 <p>Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.</p> <p>Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2021-36023 https://cve.radiocsirt.org/vuln/ghsa-8cjg-f53m-8m9q <p><strong>Affected:</strong> Packagist: magento/project-community-edition, Packagist: magento/community-edition</p> <p>Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.</p> <p><strong>Affected:</strong> Packagist: magento/project-community-edition, Packagist: magento/community-edition</p> <p>Magento Commerce versions 2.4.2 (and earlier), 2.4.2-p1 (and earlier) and 2.3.7 (and earlier) are affected by an XML Injection vulnerability in the Widgets Update Layout. An attacker with admin privileges can trigger a specially crafted script to achieve remote code execution.</p> https://cve.radiocsirt.org/vuln/ghsa-8cjg-f53m-8m9q https://cve.radiocsirt.org/vuln/gsd-2021-36023 gsd-2021-36023 https://cve.radiocsirt.org/vuln/gsd-2021-36023