Most recent entries from all https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 12 Oct 2026 07:44:16 +0000 CVE-2020-24408 — Stored XSS in customer address upload feature https://cve.radiocsirt.org/vuln/cve-2020-24408 <p><strong>Affected:</strong> Adobe Magento Commerce</p> <p>Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by a persistent XSS vulnerability that allows users to upload malicious JavaScript via the file upload component. This vulnerability could be abused by an unauthenticated attacker to execute XSS attacks against other Magento users. This vulnerability requires a victim to browse to the uploaded file.</p> <p><strong>Affected:</strong> Adobe Magento Commerce</p> <p>Magento versions 2.4.0 and 2.3.5p1 (and earlier) are affected by a persistent XSS vulnerability that allows users to upload malicious JavaScript via the file upload component. This vulnerability could be abused by an unauthenticated attacker to execute XSS attacks against other Magento users. This vulnerability requires a victim to browse to the uploaded file.</p> https://cve.radiocsirt.org/vuln/cve-2020-24408