Threats tagged 'ghsa-7w2v-f22h-p6r2'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Medium	4.8	CVE-2026-128051OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scripting Medium4.82026-11-13GCVE DatabaseCVE-2026-128051 OpenMage magento-lts versions before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contain a stored cross-site scripting (XSS) vulnerability. This occurs because certain storefront templates output product names without proper escaping. Attackers with admin product-edit rights can inject malicious scripts into product names, which execute when shoppers view affected pages. Report on CVE-2026-128051 Vulnerability CWE-79 #ghsa-7w2v-f22h-p6r2	GCVE Database	2026-11-13

Page 1 of 1