Magento CMS APPSEC-1484 Remote Code Execution Vulnerability

Magento CMS is the United States Magento company's set of open source PHP e-commerce content management system CMS. A remote code execution vulnerability exists in Magento CMS. An attacker can exploit this vulnerability to execute arbitrary code in the context of an affected application...

Magento CMS URL Handling Cross-Site Scripting Vulnerability

Magento CMS is the United States Magento company's set of open source PHP e-commerce content management system CMS. A cross-site scripting vulnerability exists in Magento CMS due to failure to adequately filter user input data. An attacker could exploit this vulnerability by executing arbitrary...