magento/project-community-edition

3 results · Clear filters · Feed

• Critical 9.1
  CVE-2025-54236 Exploited Public exploit Scanner template EPSS 96%

  Adobe Commerce | Improper Input Validation (CWE-20)

  Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Improper Input Validation vulnerability. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality,…

  Adobe Adobe Commerce magento/community-edition magento/project-community-edition Packagist
  Sep 9, 2025

  KEV Oct 24, 2025
• Critical 10.0
  CVE-2022-35698 Public exploit EPSS 15%

  Adobe Commerce Stored XSS Arbitrary code execution

  Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.

  Adobe Magento Commerce magento/community-edition magento/project-community-edition Web / CMS Packagist
  Oct 14, 2022
• Critical 9.1
  CVE-2021-21014 Public exploit

  Magento Commerce Arbitrary Folder Empty Could Lead To Arbitrary Code Execution

  Magento versions 2.4.1 (and earlier), 2.4.0-p1 (and earlier) and 2.3.6 (and earlier) are vulnerable to a file upload restriction bypass. Successful exploitation could lead to arbitrary code execution by an authenticated attacker. Access to the admin console i…

  Adobe Magento Commerce magento/community-edition magento/project-community-edition Web / CMS Packagist
  Feb 11, 2021