IP-DB.com
Türkçe English Deutsch Español
Anmelden API-Schlüssel holen
9.3Kritisch

CVE-2026-91013Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source Veröffentlicht: (vor 20 Tagen)

Beschreibung

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by an attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.

Schwachstellentyp (CWE): CWE-79

Daten: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Wiedergegeben wie in der Quelle, auf Englisch.

Betroffene Produkte und Versionen

HerstellerProduktVersionen
Adobe Adobe Commerce ≤ 2.4.9-2026-sep, 2.4.8-2026-sep, 2.4.7-2026-sep, 2.4.6-2026-sep, 2.4.5-2026-sep, 2.4.4-2026-sep, fixed 2.4.10-alpha1,2.4.9-2026-oct, 2.4.8-2026-oct, 2.4.7-2026-oct, 2.4.6-2026-oct, 2.4.5-2026-oct, 2.4.4-2026-oct
Adobe Adobe Commerce B2B ≤ 1.5.3-2026-sep, 1.5.2-2026-sep, 1.4.2-2026-sep, 1.3.4-2026-sep, 1.3.3-2026-sep, fixed 1.5.4-alpha1,1.5.3-2026-oct, 1.5.2-2026-oct, 1.4.2-2026-oct, 1.3.4-2026-oct, 1.3.3-2026-oct
Adobe Magento Open Source ≤ 2.4.9-2026-sep, 2.4.8-2026-sep, 2.4.7-2026-sep, fixed 2.4.10-alpha1,2.4.9-2026-oct, 2.4.8-2026-oct, 2.4.7-2026-oct

Referenzen und Patches

Neue CVEs im selben Produkt — Adobe Commerce / Magento

8.7Hoch
CVE-2026-95631

Adobe Commerce | Improper Input Validation (CWE-20)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitatio…

7.2Hoch
CVE-2026-92910

Adobe Commerce | Incorrect Authorization (CWE-863)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Incorrect Authorization vulnerability that could result in a Security feature bypass. An attacker could leverage this vulnerability to bypass security measures and gain unauthorized read and limited write access. Exploitation …

9.1Kritisch
CVE-2026-92464

Adobe Commerce | Improper Input Validation (CWE-20)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in arbitrary code execution in the context of the current user. An attacker with high privileges could exploit this vulnerability to execute arbitrary code. Exploitatio…

4.3Mittel
CVE-2026-95630

Adobe Commerce | Improper Input Validation (CWE-20)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by an Improper Input Validation vulnerability that could result in a Security feature bypass. A low-privileged attacker could leverage this vulnerability to bypass security measures and gain unauthorized read access. Exploitation of…

8.1Hoch
CVE-2026-92922

Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)

Adobe Adobe Commerce; Adobe Adobe Commerce B2B; Adobe Magento Open Source

Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they br…