CVE-2026-42458

The record

Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, there is a reflected XSS vulnerability under admin panel -> System -> Import/Export -> Dataflow - Profiles. This vulnerability is fixed in 20.18.0.

Affected packages

Related vulnerabilities

• CVE-2026-54002 Kirby is an open-source content management system. CWE-87
• CVE-2026-55661 Tina is a headless content management system. CWE-87
• GHSA-2vcc-5v34-9jc8 TinaCMS rich-text (slatejson) rendering does not sanitize link/image URLs, allowing… CWE-87
• CVE-2026-46492 md-fileserver allows for local viewing of markdown files in a browser. CWE-87
• CVE-2026-25688 Improper Neutralization of Alternate XSS Syntax vulnerability in Apache Answer. CWE-87
• GHSA-32q2-hhr5-6qvv md-fileserver: Stored/Reflected XSS when viewing Markdown (raw HTML allowed) CWE-87
• CVE-2026-45314 Open WebUI is a self-hosted artificial intelligence platform designed to operate entirely… CWE-87
• CVE-2026-42235 n8n is an open source workflow automation platform. CWE-87