Known vulnerabilities in OPENMAGE magento-lts 20.0.1

Vendor: OPENMAGE
Website: https://www.openmage.org/
Total Security Bulletins: 14

Security bulletins (14)

Secuity bulletin Severity Status Published
SB2026020317: Admin URL exposure in magento-lts Low
Patched
03.02.2026
SB2025110107: Stored XSS via Admin Notifications in magento-lts Low
Patched
01.11.2025
SB2025022883: Stored XSS in OpenMage magento-lts Low
Patched
28.02.2025
SB2024072802: Stored XSS in magento-lts Low
Patched
28.07.2024
SB2024022805: Stored cross-site scripting in magento-lts Low
Patched
28.02.2024
SB2023120802: Stored XSS in Magento-lts WYSIWYG editor Low
Patched
08.12.2023
SB2023091222: Information disclosure in magento-lts Low
Patched
12.09.2023
SB2023020250: magento-lts update for prototype.js Low
Patched
02.02.2023
SB2023012643: Multiple vulnerabilities in magento-lts Medium
Patched
26.01.2023
SB2023012642: Multiple vulnerabilities in magento-lts Low
Patched
26.01.2023
SB2021082705: Multiple vulnerabilities in Magento LTS High
Patched
27.08.2021
SB2021042118: Multiple vulnerabilities in Magento LTS High
Patched
21.04.2021
SB2020102136: Remote code execution in Magento LTS Low
Patched
21.10.2020
SB2020082516: Cross-site request forgery in OpenMage magento-lts Low
Patched
25.08.2020