GHSA-8j7c-682x-r9f2
Magento RCE,XSS and other vulnerabilities
Magento Commerce and Open Source 2.3.0, 2.2.7 and 2.1.16 contain multiple security enhancements that help close Remote Code Execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities.
What each source reports
GitHub AdvisoriesNo score
Magento RCE,XSS and other vulnerabilities
Magento Commerce and Open Source 2.3.0, 2.2.7 and 2.1.16 contain multiple security enhancements that help close Remote Code Execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities.
- Record
GHSA-8j7c-682x-r9f2- Updated
- 2026-11-02
OSVNo score
Magento RCE,XSS and other vulnerabilities
Magento Commerce and Open Source 2.3.0, 2.2.7 and 2.1.16 contain multiple security enhancements that help close Remote Code Execution (RCE), Cross-Site Scripting (XSS) and other vulnerabilities.
- Record
GHSA-8j7c-682x-r9f2- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
magento/community-editionPackagist | 2.1 up to 2.1.16 | 2.1.16 |
magento/community-editionPackagist | 2.2 up to 2.2.7 | 2.2.7 |
magento/community-editionPackagist | 2.1 up to 2.1.16, plus listed versions 2.1.02.1.0-rc12.1.0-rc22.1.0-rc32.1.1 Show 14 moreShow less2.1.102.1.112.1.122.1.132.1.142.1.152.1.22.1.32.1.42.1.52.1.62.1.72.1.82.1.9 | 2.1.16 |
magento/community-editionPackagist | 2.2 up to 2.2.7, plus listed versions 2.2.02.2.12.2.22.2.32.2.42.2.52.2.6 | 2.2.7 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-8j7c-682x-r9f2 is a vulnerability with no CVSS score yet in magento/community-edition, published May 15, 2024. No source lists public exploit code. Fixed in magento/community-edition 2.1.16.