Description Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field. Scope is changed.
A stored Cross-Site Scripting (XSS) vulnerability has been identified in Adobe Commerce and Magento Open Source versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier. This vulnerability allows a high-privileged attacker to inject malicious scripts into vulnerable form fields. When a victim views the page containing the compromised field, the injected JavaScript could be executed in their browser.
Users are advised to update to Adobe Commerce versions 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15, 2.4.5-p17, 2.4.4-p18 or to Magento Open Source versions 2.4.9, 2.4.8-p5, 2.4.7-p10, 2.4.6-p15.
Show AI summary Metrics CVSS Version 4.0 CVSS Version 3.x CVSS Version 2.0 SSVC
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed May 13, 2026 Exploitation: NoneAutomatable: NoTechnical Impact: Partial
References to Advisories, Solutions, and Tools By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
Weakness Enumeration CWE-ID CWE Name Source CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') [email protected]
Affected Products Product Versions adobe commerce < 2.4.4
2.4.4 -
2.4.4 p1
2.4.4 p10
2.4.4 p11
2.4.4 p12
2.4.4 p13
2.4.4 p14
2.4.4 p15
2.4.4 p16
2.4.4 p17
2.4.4 p2
2.4.4 p3
2.4.4 p4
2.4.4 p5
2.4.4 p6
2.4.4 p7
2.4.4 p8
2.4.4 p9
2.4.5 -
2.4.5 p1
2.4.5 p10
2.4.5 p11
2.4.5 p12
2.4.5 p13
2.4.5 p14
2.4.5 p15
2.4.5 p16
2.4.5 p2
2.4.5 p3
2.4.5 p4
2.4.5 p5
2.4.5 p6
2.4.5 p7
2.4.5 p8
2.4.5 p9
2.4.6 -
2.4.6 p1
2.4.6 p10
2.4.6 p11
2.4.6 p12
2.4.6 p13
2.4.6 p14
2.4.6 p2
2.4.6 p3
2.4.6 p4
2.4.6 p5
2.4.6 p6
2.4.6 p7
2.4.6 p8
2.4.6 p9
2.4.7 -
2.4.7 b1
2.4.7 b2
2.4.7 beta3
2.4.7 p1
2.4.7 p2
2.4.7 p3
2.4.7 p4
2.4.7 p5
2.4.7 p6
2.4.7 p7
2.4.7 p8
2.4.7 p9
2.4.8 -
2.4.8 beta1
2.4.8 beta2
2.4.8 p1
2.4.8 p2
2.4.8 p3
2.4.8 p4
2.4.9 beta1
Viewing 5 of 72 versions. View all CPE cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p17:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p15:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p16:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.6:p13:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.6:p14:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.7:p8:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.7:p9:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.8:p3:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.8:p4:*:*:*:*:*:* cpe:2.3:a:adobe:commerce:2.4.9:beta1:*:*:*:*:*:* Remediation No remediation found in references. adobe commerce b2b < 1.3.3
1.3.3 -
1.3.3 p1
1.3.3 p10
1.3.3 p11
1.3.3 p12
1.3.3 p13
1.3.3 p14
1.3.3 p15
1.3.3 p16
1.3.3 p17
1.3.3 p2
1.3.3 p3
1.3.3 p4
1.3.3 p5
1.3.3 p6
1.3.3 p7
1.3.3 p8
1.3.3 p9
1.3.4 -
1.3.4 p1
1.3.4 p10
1.3.4 p11
1.3.4 p12
1.3.4 p13
1.3.4 p14
1.3.4 p15
1.3.4 p16
1.3.4 p2
1.3.4 p3
1.3.4 p4
1.3.4 p5
1.3.4 p6
1.3.4 p7
1.3.4 p8
1.3.4 p9
1.4.2 -
1.4.2 p1
1.4.2 p2
1.4.2 p3
1.4.2 p4
1.4.2 p5
1.4.2 p6
1.4.2 p7
1.4.2 p8
1.4.2 p9
1.5.2 -
1.5.2 p1
1.5.2 p2
1.5.2 p3
1.5.2 p4
1.5.3 beta1
Viewing 5 of 52 versions. View all CPE cpe:2.3:a:adobe:commerce_b2b:*:*:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p16:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p17:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p15:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p16:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.4.2:p8:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.4.2:p9:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.5.2:p3:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.5.2:p4:*:*:*:*:*:* cpe:2.3:a:adobe:commerce_b2b:1.5.3:beta1:*:*:*:*:*:* Remediation No remediation found in references. adobe magento < 2.4.6
2.4.6 -
2.4.6 p1
2.4.6 p10
2.4.6 p11
2.4.6 p12
2.4.6 p13
2.4.6 p14
2.4.6 p2
2.4.6 p3
2.4.6 p4
2.4.6 p5
2.4.6 p6
2.4.6 p7
2.4.6 p8
2.4.6 p9
2.4.7 -
2.4.7 b1
2.4.7 b2
2.4.7 beta3
2.4.7 p1
2.4.7 p2
2.4.7 p3
2.4.7 p4
2.4.7 p5
2.4.7 p6
2.4.7 p7
2.4.7 p8
2.4.7 p9
2.4.8 -
2.4.8 beta1
2.4.8 beta2
2.4.8 p1
2.4.8 p2
2.4.8 p3
2.4.8 p4
2.4.9 beta1
Viewing 5 of 37 versions. View all CPE cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.6:p13:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.6:p14:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.7:p8:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.7:p9:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.8:p3:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.8:p4:*:*:open_source:*:*:* cpe:2.3:a:adobe:magento:2.4.9:beta1:*:*:open_source:*:*:* Remediation No remediation found in references.
Change History 7 change records found show changes