Description Cross-site scripting (XSS) vulnerability in Magento E-Commerce Platform 1.9.0.1. References [oss-security] 20151204 Re: CVE Request: Magento SWF XSS mailing-list http://appcheck-ng.com/unpatched-vulnerabilites-in-magento-e-commerce-platform/