VULNERABILITY INTELLIGENCE
CVE-2026-42458
EPSS probability0.32%
CISA KEVNot currently listed
Published2026-05-15
Last modified2026-10-26
Description
Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, there is a reflected XSS vulnerability under admin panel -> System -> Import/Export -> Dataflow - Profiles. This vulnerability is fixed in 20.18.0.
Weakness classification
- security-advisories@github.com: CWE-87