Magnolia Cms
Approved changes feed: RSS · Atom
cpe:2.3:a:magnolia_dxp:magnolia_cms:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Magnolia Dxp (8c4f6b32-b1e4-5167-b0aa-390140778359) |
|---|---|
| Product | Magnolia Cms (7d178e79-8eda-5e2f-9415-04f1953a8457) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-18478 |
vulnerable | 2026-09-16 04:34:02.150819 |
Stored XSS in Magnolia CMS
Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into the name of uploaded image, which will be rendered/executed when opening uploaded image.
The issue was fixed in version 6.3.10
Published: 2026-08-10T13:00:16.854Z
Updated: 2026-08-10T17:58:41.118Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.