Servers and applications
CVE-2026-47995
Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session.…
- Severity
- High 8.1
- Published
- 14 Jul 2026
- Last changed
- 28 Aug 2026
- Added to UpHeron
- 21 Oct 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
Magento / Adobe CommerceServers and applications · cpe:a:adobe:commerce |
All 76 release lines
|
Magento / Adobe CommerceServers and applications · cpe:a:adobe:magento |
All 39 release lines
|