CVE-2026-21311
Description
Adobe Commerce versions 2.4.9-alpha3, 2.4.8-p3, 2.4.7-p8, 2.4.6-p13, 2.4.5-p15, 2.4.4-p16 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. A successful attacker can abuse this to achieve session takeover, increasing the confidentiality, and integrity impact to high. Exploitation of this issue requires user interaction in that a victim must browse to the page containing the vulnerable field.
EPSS (Exploit Prediction Scoring System)
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score Trend (Last 6 Days)
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
StableCommon Consequences
Applicable Platforms
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p16:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.8:-:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.7:p6:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:p11:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p12:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p11:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p2:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.6:p13:*:*:open_source:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.7:p6:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.7:p7:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.8:-:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p2:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:*:*:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.8:beta2:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p3:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:p12:*:*:open_source:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p3:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:p14:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p1:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.9:alpha1:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.7:p5:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p3:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p9:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.6:p11:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p12:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha2:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p6:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha1:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p8:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.8:p1:*:*:open_source:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p2:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:p10:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.8:beta1:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p8:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:*:*:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p9:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p14:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p3:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p7:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:p13:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p11:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p11:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.8:beta1:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p6:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:p15:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p13:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.6:p9:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:*:*:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.7:beta3:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:p10:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p8:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:p1:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p13:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p15:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.7:beta3:*:*:open_source:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.8:p3:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.7:p3:*:*:open_source:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.7:p4:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p14:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p10:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.9:alpha2:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.6:p8:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p5:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p5:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p13:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p15:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.7:p3:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.7:p4:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p5:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.7:p5:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.8:p2:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p3:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p10:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.7:p7:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p4:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.6:p9:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.6:p8:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.6:p11:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.6:p10:*:*:open_source:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:p12:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.8:p2:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.7:p8:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p4:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.6:p12:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.9:alpha3:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.6:p12:*:*:open_source:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p15:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.8:p1:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.8:beta2:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.6:p13:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.5.3:alpha3:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:p15:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p6:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p2:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.9:alpha3:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p16:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:p14:*:*:open_source:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.5.2:-:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.4:p12:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p4:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p4:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p1:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.6:p10:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p6:*:*:*:*:*:*
Commerce by Adobe
cpe:2.3:a:adobe:commerce:2.4.5:p11:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.5:p1:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:p13:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p13:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p7:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p5:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p11:*:*:*:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p7:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.8:p3:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.3:p14:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.3.4:p12:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.7:p8:*:*:open_source:*:*:*
Commerce B2B by Adobe
cpe:2.3:a:adobe:commerce_b2b:1.4.2:p8:*:*:*:*:*:*
Magento by Adobe
cpe:2.3:a:adobe:magento:2.4.7:b2:*:*:open_source:*:*:*