Threats tagged 'ghsa-qxw7-h2wh-cqrv'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Low	2.3	CVE-2026-128053OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a reflected cross-site scripting Low2.32026-11-13GCVE DatabaseCVE-2026-128053 OpenMage magento-lts versions before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 have a reflected cross-site scripting (XSS) vulnerability in error pages. The vulnerability arises because error pages print SCRIPT_NAME-derived URLs from errors/processor.php without proper escaping. This allows unauthenticated attackers to craft malicious links that trigger uncaught exceptions, causing script execution in the storefront origin within victims' browsers. Report on CVE-2026-128053 Vulnerability CWE-79 #ghsa-qxw7-h2wh-cqrv	GCVE Database	2026-11-13

Page 1 of 1