Article
Cyber News / Article / Vulnerability in Magnolia CMS software
CE
CERT Polska-2026-08-10
Vulnerability in Magnolia CMS software
CERT Polska has received a report about vulnerability in Magnolia CMS software and participated in coordination of its disclosure.
The vulnerabilityCVE-2026-18478: Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into the name of uploaded image, which will be rendered/executed when opening uploaded image.
The issue was fixed in version 6.3.10
We thank Kacper Paluch and Åukasz SobaÅski for the responsible vulnerability report.
Related articles
in
[email protected] (The Hacker News)CISA Confirms Hackers Exploiting WordPress Core Flaw During Software Upgrades
1 day ago
Gu
Guru BaranDebian and Ubuntu APT Flaw Lets Hackers Hijack Software Updates and Execute Code as Root
about 19 hours ago
Tu
Tushar Subhra DuttaGorbag Hackers Exploit WinRAR Vulnerability to Steal Credentials From Ukrainian Government Agencies
about 21 hours ago
You might Also like
Gu
Guru Baran-about 8 hours ago
DreamHost Confirms Data Breach – Hackers Stole Customer Credentials and Accessed Emails
Gu
Guru Baran-about 9 hours ago
OpenAI Cyber Model Uncovers 948 Linux Kernel Privilege Escalation Vulnerabilities
Bi
Bill Toulas-about 14 hours ago
