XSS Bug in Magento Allows Attackers to Take Over Online Shops

XSS Bug in Magento Allows Attackers to Take Over Online Shops

The malicious code can be stored inside email address fields, and then executed in the Magento backend