openmage Latest Vulnerabilities
Latest vulnerabilities published by openmage
Vulnerability Published:
🗓️ Published
- Anytime
Sort By:
🗓️ Published Date
- Descending
Stored Cross-Site Scripting Vulnerability in OpenMage Magento-LTS
CVE-2023-54423OpenmageMagento-lts8.3HIGHOpenMage magento-lts before 20.18.2 Stored XSS via Product Custom Option SVG Upload
CVE-2026-128028OpenmageMagento-lts2.3LOWOpenMage magento-lts before 20.18.2 Stored XSS via Dataflow Import Row Errors
CVE-2026-128029OpenmageMagento-lts2.3LOWInsufficient Session Expiration in OpenMage Magento-LTS Affects API Access
CVE-2026-128030OpenmageMagento-lts7.4HIGHOpenMage magento-lts before 20.18.2 Incorrect Authorization in Admin Controllers ACL
CVE-2026-128031OpenmageMagento-lts5.1MEDIUMOpenMage magento-lts before 20.18.2 Payment Bypass via Free Payment Method
CVE-2026-128032OpenmageMagento-lts5.9MEDIUMOpenMage magento-lts before 20.18.2 Information Disclosure via Order-Status RSS Feed
CVE-2026-128033OpenmageMagento-lts5.3MEDIUMStored Cross-Site Scripting in OpenMage Magento-LTS Affects Admin Capabilities
CVE-2026-128040OpenmageMagento-lts8.4HIGHStored Cross-Site Scripting in OpenMage Magento-LTS
CVE-2026-128041OpenmageMagento-lts8.8HIGHOpenMage magento-lts before 20.19.0 Race Condition in Coupon Usage Limits
CVE-2026-128042OpenmageMagento-lts6.3MEDIUMOpenMage magento-lts before 20.19.0 CSRF via PayPal Cancel Return Handlers
CVE-2026-128043OpenmageMagento-lts2.3LOWOAuth Callback URL Validation Bypass in OpenMage Magento Product by OpenMage
CVE-2026-128044OpenmageMagento-lts8.7HIGHOpenMage Magento-LTS before 20.18.2 Authorization Bypass via Forgeable RSS Order Key
CVE-2026-128045OpenmageMagento-lts6.9MEDIUMUnrestricted File Upload Vulnerability in OpenMage Magento LTS Products
CVE-2026-128046OpenmageMagento-lts9.2CRITICALAccount Takeover Risk in OpenMage Magento-LTS by OpenMage
CVE-2026-128047OpenmageMagento-lts9.2CRITICALOpenMage magento-lts before 20.18.2 Information Disclosure via Email Template getConfig
CVE-2026-128048OpenmageMagento-lts6.9MEDIUMCross-Site Request Forgery in OpenMage Magento LTS by OpenMage
CVE-2026-128049OpenmageMagento-lts9.4CRITICALOpenMage magento-lts before 20.18.2 Stored XSS via Product Name in MSRP Popup
CVE-2026-128051OpenmageMagento-lts4.8MEDIUMOpenMage magento-lts before 20.19.0 Block Whitelist Bypass via {{layout}} Directive
CVE-2026-128052OpenmageMagento-lts5.1MEDIUMOpenMage magento-lts before 20.18.2 Reflected XSS via Error Pages SCRIPT_NAME
CVE-2026-128053OpenmageMagento-lts2.3LOWUnvalidated Redirect in Magento Long Term Support Affects E-commerce Operations
CVE-2026-42207OpenmageMagento-lts6.1MEDIUMXML-RPC/SOAP API Vulnerability in OpenMage Magento Long Term Support
CVE-2026-42155OpenmageMagento-lts9.3CRITICALReflected XSS Vulnerability in OpenMage Magento LTS E-commerce Platform
CVE-2026-42458OpenmageMagento-lts5.3MEDIUMRemote Code Execution Vulnerability in OpenMage LTS e-commerce Platform
CVE-2026-40488OpenmageMagento-lts8.7HIGHAccess Control Flaw in Magento Long Term Support Affecting Shared Wishlists
CVE-2026-40098OpenmageMagento-lts5.3MEDIUM