Magento Cross-Site Scripting (XSS) vulnerability
Date: 2024-05
Affected: composer/magento/community-edition, composer/magento/community-edition
Attack vector: xss
Category: vulnerability-disclosure
Severity: Medium

Magento Commerce and Open Source 2.2.6 and 2.1.15 contain multiple security enhancements that help close Cross-Site Scripting (XSS) and other vulnerabilities.


Mitigations:

Architectural layers (MAESTRO):