Magento 1.9.2.2 RSS Feed Information Disclosure

------------------------------------------------------------------ Magento load$data'orderid'; 94. if $order-getId 95. && $order-getIncrementId == $data'incrementid' 96. && $order-getCustomerId == $data'customerid' 97. 98. return $order; 99. 100. 101. return null; 102. User input passed through t...

Critical Flaws in Magento leave Millions of E-Commerce Sites at Risk

If you are using Magento to run your e-commerce website, it's time for you to update the CMS content management system now. Millions of online merchants are at risk of hijacking attacks due to a number of critical cross-site scripting XSS vulnerabilities in the Magento, the most popular e-commerc...

Magento Update Addresses XSS, CSRF Vulnerabilities

Magento patched 20 vulnerabilities last week, including a stored cross-site scripting XSS flaw in the e-commerce platform that could have let an attacker take over a site and create new admin accounts. Researchers at Sucuri dug up the XSS vulnerability while combing through research audits last...