NVD Vulnerability Detail
Search Exploit, PoC
CVE-2026-42458
Summary

Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the Magento Community Edition e-commerce platform with a high level of backward compatibility. Prior to 20.18.0, there is a reflected XSS vulnerability under admin panel -> System -> Import/Export -> Dataflow - Profiles. This vulnerability is fixed in 20.18.0.

Publication Date May 16, 2026, 2:16 a.m.
Registration Date May 17, 2026, 4:12 a.m.
Last Update May 16, 2026, 4:16 a.m.
Related information, measures and tools
Common Vulnerabilities List