CVE-2021-21019

Magento versions 2.4.1 and earlier, 2.4.0-p1 and earlier and 2.3.6 and earlier are vulnerable to XML injection in the Widgets module. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console is required for successful exploitation...

CVE-2021-21019

CVE-2021-21019 (Magento) is a XML injection vulnerability in the Widgets module affecting Magento 2.4.1 and earlier (2.4.0-p1, 2.3.6 and earlier). Successful exploitation could lead to arbitrary code execution by an authenticated attacker with admin console access. Affected versions have patches:...