← All credits

colinmollenhour

19 vulnerability records and advisories credit this contributor.

CVE-2026-128033

OpenMage magento-lts before 20.18.2 Information Disclosure via Order-Status RSS Feed

CVE-2026-128043

OpenMage magento-lts before 20.19.0 CSRF via PayPal Cancel Return Handlers

CVE-2026-128047

OpenMage magento-lts before 20.18.2 Account Takeover via Predictable Confirmation Key

CVE-2026-128052

OpenMage magento-lts before 20.19.0 Block Whitelist Bypass via {{layout}} Directive

CVE-2026-128029

OpenMage magento-lts before 20.18.2 Stored XSS via Dataflow Import Row Errors

CVE-2026-128051

OpenMage magento-lts before 20.18.2 Stored XSS via Product Name in MSRP Popup

CVE-2026-128046

OpenMage magento-lts 20.17.0 before 20.18.2 Unrestricted File Upload RCE via Custom Options

CVE-2026-128042

OpenMage magento-lts before 20.19.0 Race Condition in Coupon Usage Limits

CVE-2026-128032

OpenMage magento-lts before 20.18.2 Payment Bypass via Free Payment Method

CVE-2026-128028

OpenMage magento-lts before 20.18.2 Stored XSS via Product Custom Option SVG Upload