Magento remote code execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities

Description

References

• FriendsOfPHP/security-advisories · WEB
• magento/magento2 · PACKAGE
• web.archive.org/web/20210802091126/https://magento.com/security/patches/magento-2.2.5-and-2.1.14-security-update · WEB

Mais vulnerabilidades de magento/community-edition

• CVE-2025-54267MÉDIO 6.5Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authoriza…
• CVE-2025-54266MÉDIO 4.8Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Sc…
• CVE-2025-54265MÉDIO 5.9Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authoriza…
• CVE-2025-54264ALTO 8.1Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by a stored Cross-Site Sc…
• CVE-2025-54263ALTO 8.1Adobe Commerce versions 2.4.9-alpha2, 2.4.8-p2, 2.4.7-p7, 2.4.6-p12, 2.4.5-p14, 2.4.4-p15 and earlier are affected by an Incorrect Authoriza…