{"affected":[{"defaultStatus":"unaffected","product":"magento-lts","source":"CNA: VulnCheck","vendor":"OpenMage","versions":[{"lessThan":"20.18.2","status":"affected","version":"0","versionType":"semver"},{"status":"unaffected","version":"20.18.2","versionType":"semver"}]},{"defaultStatus":"unaffected","product":"magento-lts","source":"CNA: VulnCheck","vendor":"OpenMage","versions":[{"lessThan":"21.0.0-beta3","status":"affected","version":"21.0.0-beta1","versionType":"semver"},{"status":"unaffected","version":"21.0.0-beta3","versionType":"semver"}]}],"cveId":"CVE-2026-128029","cwes":["CWE-79"],"description":"OpenMage magento-lts before 20.18.2 and 21.0.0-beta1 before 21.0.0-beta3 contains a stored cross-site scripting vulnerability in the Dataflow profile run page, which inserts catalog product import row errors into the page without escaping. Unauthenticated attackers can place markup in the store, type, or attribute_set columns of an import file to run script in the session of the administrator who imports it.","epss":null,"exploits":[],"kev":null,"metrics":[{"score":2.3,"severity":"low","source":"CNA: VulnCheck","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N","version":"4.0"},{"score":4.7,"severity":"medium","source":"CNA: VulnCheck","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"},{"score":2.3,"severity":"low","source":"NVD: disclosure@vulncheck.com","vector":"CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X","version":"4.0"},{"score":4.7,"severity":"medium","source":"NVD: disclosure@vulncheck.com","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N","version":"3.1"}],"modifiedAt":1794565088850,"publishedAt":1794562441768,"references":[{"source":"CNA: VulnCheck","tags":["vendor-advisory"],"url":"https://github.com/OpenMage/magento-lts/security/advisories/GHSA-28hq-mq6h-fh2x"},{"source":"CNA: VulnCheck","tags":["patch"],"url":"https://github.com/OpenMage/magento-lts/commit/d10314ddda9a6081bc27370b463b5f77c2e499de"},{"source":"CNA: VulnCheck","tags":["third-party-advisory"],"url":"https://www.vulncheck.com/advisories/openmage-magento-lts-before-20.18.2-stored-xss-via-dataflow-import-row-errors"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://github.com/OpenMage/magento-lts/commit/d10314ddda9a6081bc27370b463b5f77c2e499de"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://github.com/OpenMage/magento-lts/security/advisories/GHSA-28hq-mq6h-fh2x"},{"source":"disclosure@vulncheck.com","tags":[],"url":"https://www.vulncheck.com/advisories/openmage-magento-lts-before-20.18.2-stored-xss-via-dataflow-import-row-errors"}],"remediation":[{"kind":"fix","source":"CNA: VulnCheck","text":"The reporting source identifies this reference as a patch. Check the advisory for affected versions and supported release branches.","url":"https://github.com/OpenMage/magento-lts/commit/d10314ddda9a6081bc27370b463b5f77c2e499de"}],"revision":"957bcbf7f0223bcd1ecf631d08b5c415488fec9fb5cf3cd77c9c694e05adf8bc","sources":[{"modifiedAt":1794562441768,"name":"CNA: VulnCheck","retrievedAt":1794564828911,"url":"https://www.cve.org/CVERecord?id=CVE-2026-128029"},{"modifiedAt":1794565088850,"name":"NVD","retrievedAt":1794572252704,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-128029"}],"ssvc":null,"status":"published","title":"OpenMage magento-lts before 20.18.2 Stored XSS via Dataflow Import Row Errors","updatedAt":1794572252704}