openmage Latest High & Critical Vulnerabilities
Latest High & Critical vulnerabilities published by openmage
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Stored Cross-Site Scripting Vulnerability in OpenMage Magento-LTS
CVE-2023-54423OpenmageMagento-lts8.3HIGHInsufficient Session Expiration in OpenMage Magento-LTS Affects API Access
CVE-2026-128030OpenmageMagento-lts7.4HIGHStored Cross-Site Scripting in OpenMage Magento-LTS Affects Admin Capabilities
CVE-2026-128040OpenmageMagento-lts8.4HIGHStored Cross-Site Scripting in OpenMage Magento-LTS
CVE-2026-128041OpenmageMagento-lts8.8HIGHOAuth Callback URL Validation Bypass in OpenMage Magento Product by OpenMage
CVE-2026-128044OpenmageMagento-lts8.7HIGHUnrestricted File Upload Vulnerability in OpenMage Magento LTS Products
CVE-2026-128046OpenmageMagento-lts9.2CRITICALAccount Takeover Risk in OpenMage Magento-LTS by OpenMage
CVE-2026-128047OpenmageMagento-lts9.2CRITICALCross-Site Request Forgery in OpenMage Magento LTS by OpenMage
CVE-2026-128049OpenmageMagento-lts9.4CRITICALXML-RPC/SOAP API Vulnerability in OpenMage Magento Long Term Support
CVE-2026-42155OpenmageMagento-lts9.3CRITICALRemote Code Execution Vulnerability in OpenMage LTS e-commerce Platform
CVE-2026-40488OpenmageMagento-lts8.7HIGHDeserialization Vulnerability in OpenMage LTS e-Commerce Platform
CVE-2026-25524OpenmageMagento-lts8.1HIGHMagento LTS's guest order "protect code" can be brute-forced too easily
CVE-2023-41879OpenmageMagento-lts7.5HIGHOpenMage LTS DataFlow upload remote code execution vulnerability
CVE-2021-41231OpenmageMagento-lts7.2HIGHOpenMage LTS authenticated remote code execution through layout update
CVE-2021-41144OpenmageMagento-lts8.8HIGHOpenMage LTS arbitrary file deletion in customer media allows for remote code execution
CVE-2021-41143OpenmageMagento-lts7.2HIGHOpenMage LTS arbitrary command execution in custom layout update through blocks
CVE-2021-39217OpenmageMagento-lts7.2HIGHData Flow Sanitation Issue Fix
CVE-2021-32759OpenmageMagento-lts7.2HIGHLayout XML Arbitrary Code Fix
CVE-2021-32758OpenmageMagento-lts7.2HIGHBackport for CVE-2021-21024 Blind SQLi from Magento 2
CVE-2021-21427OpenmageMagento-lts9.1CRITICALFixes a bug in Zend Framework's Stream HTTP Wrapper
CVE-2021-21426OpenmageMagento-lts9.8CRITICALCMS Editor code execution
CVE-2020-26295OpenmageMagento-lts8.7HIGHWidget instances allows a hacker to inject an executable file on the server on OpenMage
CVE-2020-26285OpenmageMagento-lts8.7HIGHLayout XML RCE Vulnerability in OpenMage
CVE-2020-26252OpenmageMagento-lts8.7HIGHRCE in Magento
CVE-2020-15244OpenmageMagento-lts8HIGHObservable Timing Discrepancy in OpenMage LTS
CVE-2020-15151OpenmageMagento-lts8HIGH