Magnolia DXP vulnerabilities and threats

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Medium	5.1	EPSS 0.5%	CVE-2026-18478Magnolia CMS · Cross-site Scripting Medium5.1EPSS 0.5%2026-08-10CVE Database V5CVE-2026-18478 Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into the name of uploaded image, which will be rendered/executed when opening uploaded image. The issue was fixed in version 6.3.10 EPSS 0.5%Vulnerability Magnolia DXP CWE-79	CVE Database V5	2026-08-10

Page 1 of 1