GitHub Advisoryadvisory · Packagist

GHSA-5pxh-89cx-4668 Magento LTS vulnerable to stored XSS in theme config fields

LOW Published 2025-03-03 Modified 2025-03-03 Official page ↗
Aliases
CVE-2025-27400
Ecosystem
Packagist
Packages
openmage/magento-lts
Severity
Low
CVSS vector
CVSS:3.1/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L
Weaknesses
CWE-79
Reviewed
2025-03-03

Affected packages

• Packagist openmage/magento-lts: < 20.12.3 → fixed in 20.12.3

Description

As reported by Aakash Adhikari, Github: @justlife4x4, the Design > Themes > Skin (Images / CSS) config field allows a Stored XSS when it contains an end script tag. Impact A malicious user with access to this configuration field could use a Stored XSS to affect other authenticated admin users in the admin panel. The attack requires an admin user with configuration access, so in practice, it is not very likely to be used for gaining elevated privileges, although it could theoretically be used to impersonate other users.

Related

Alias · CVE (1)

  • CVE-2025-27400 Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition… vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References