Threats tagged 'ghsa-52qf-56m3-p2jq'

OpenMage magento-lts versions before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 serve RSS feeds with a text/html content type and do not escape feed entry data, leading to stored cross-site scripting (XSS). An unauthenticated guest can submit a product review containing malicious script in the nickname, title, or text fields. This script executes when an administrator views the pending-reviews RSS feed, potentially allowing admin account takeover.