Exposición de Magento

CMS, Ecommerce
499
score de exposición
32.588
sitios usan
4
en explotación
39
críticos

CVEs

361 resultados
CVE-2024-41676MEDIUMMagento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configsEPSS 0.4%CVE-2026-21311HIGHAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)EPSS 0.4%CVE-2026-21310MEDIUMAdobe Commerce | Improper Input Validation (CWE-20)EPSS 0.3%CVE-2026-21286MEDIUMAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.3%CVE-2026-48414HIGHAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)EPSS 0.3%CVE-2026-25523MEDIUMMagento's X-Original-Url header can expose admin urlEPSS 0.3%CVE-2026-42458MEDIUMMagento LTS: Reflected XSS - Import -> Data Flow (profiles)EPSS 0.3%CVE-2026-21291MEDIUMAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)EPSS 0.3%CVE-2026-21292MEDIUMAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)EPSS 0.3%CVE-2026-21285MEDIUMAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.3%CVE-2026-21293MEDIUMAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 0.3%CVE-2026-21294MEDIUMAdobe Commerce | Server-Side Request Forgery (SSRF) (CWE-918)EPSS 0.3%CVE-2026-34658MEDIUMAdobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)EPSS 0.3%CVE-2026-21295LOWAdobe Commerce | URL Redirection to Untrusted Site ('Open Redirect') (CWE-601)EPSS 0.3%CVE-2025-27400LOWMagento vulnerable to stored XSS in theme config fieldsEPSS 0.3%CVE-2026-21359MEDIUMAdobe Commerce | Incorrect Authorization (CWE-863)EPSS 0.2%CVE-2025-64174MEDIUMOpenMage is vulnerable to XSS in Admin NotificationsEPSS 0.2%CVE-2025-58669MEDIUMWordPress Magento 2 WordPress Integration plugin <= 1.4.2.1 - Cross Site Scripting (XSS) vulnerabilityEPSS 0.2%CVE-2026-40098MEDIUMOpenMage LTS imports cross-user wishlist item via shared wishlist code, leading to private option disclosure and file-disclosure variantEPSS 0.2%CVE-2026-42207MEDIUMMagento LTS: Open Redirect via Unvalidated `uenc` Parameter in `stockAction()` - magento-ltsEPSS 0.2%