Adobe Commerce B2B 1.5.3 Beta 1
Approved changes feed: RSS · Atom
cpe:2.3:a:adobe:commerce_b2b:1.5.3:beta1:*:*:*:*:*:*
part: a version: 1.5.3 update: beta1
| Vendor | Adobe (fb293c1b-cab3-5565-9184-186e4ece530b) |
|---|---|
| Product | Commerce B2B (0438a8f0-e6e4-5173-894c-d65980508376) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-34686 |
vulnerable | 2026-06-08 07:59:12.997555 |
Adobe Commerce | Cross-site Scripting (Stored XSS) (CWE-79)
HIGH (8.7)
Adobe Commerce versions 2.4.9-beta1, 2.4.8-p4, 2.4.7-p9, 2.4.6-p14, 2.4.5-p16, 2.4.4-p17 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a low-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim's browser when they browse to the page containing the vulnerable field, potentially gaining elevated access or control over the victim's account or session. Scope is changed.
Published: 2026-05-12T19:50:32.687Z
Updated: 2026-05-13T15:37:30.478Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.