Adobe Commerce and Magento Open Source Group.php XSS漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://isecurity.huawei.com/security/wiki/ips/detail?threatId=731720

Related Vulnerabilities

• PoCCVE-2026-0692: BlueSnap Payment Gateway for WooCommerce <=3.4.0 - IPN Authorization Bypass
• PoCCVE-2026-49060: Hippoo Mobile App for WooCommerce - Broken Access Control
• PoCCVE-2026-0702: VidShop for WooCommerce <= 1.1.4 - SQL Injection
• PoCnuget-config-exposure: NuGet.config Package Source Credentials - Exposure
• PoCCVE-2026-11387: SMS Alert – SMS & OTP for WooCommerce - Privilege Escalation
• PoCCVE-2026-71362: Adobe Commerce/Magento - Customer Session Identity Switch
• PoCCVE-2026-27542: WooCommerce Wholesale Lead Capture <= 2.0.3.1 - Unauthenticated Privilege Escalation
• PoCCVE-2026-3891: Pix for WooCommerce <= 1.5.0 - Unauthenticated Arbitrary File Upload
• 北京中科聚网一体化运营平台 /manage/tplresource/importVisualModuleImg 文件上传漏洞
• 东胜物流软件 /PriceCarrier/OpSailingDateInfoGridSource.aspx SQL 注入漏洞
• 东胜物流软件 /PriceCarrier/CrmProxyMailListHtmlGridSource.aspx SQL 注入漏洞
• JeecgBoot 积木报表 /jmreport/getDataSourceByPage 信息泄露漏洞
• PoCCVE-2026-48282: Adobe ColdFusion - RDS Arbitrary File Write