Executive brief
Magento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configs
Affected products
- Packagist openmage/magento-lts
Junglewise Threat Intelligence
CVE-2024-41676: Magento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configs
CVE-2024-41676 · Severity: low · CVSS 3.1 · Published 2024-07-29
Technologies: openmage/magento-lts (Packagist). Vendors: Packagist.
Related threats
- OpenMage Magento LTS reflected XSS in Dataflow Profiles
- OpenMage Magento LTS open redirect in stockAction controller
- OpenMage Magento LTS predictable API session ID generation
- OpenMage LTS: Customer File Upload Extension Blocklist Bypass → Remote Code Execution
- OpenMage LTS: Cross-user wishlist import leads to private option & file disclosure