CVE-2026-128029 | OpenMage magento up to 20.18.1/21.0.0-beta2 Dataflow Profile cross site scripting

A vulnerability was found in OpenMage magento up to 20.18.1/21.0.0-beta2 and classified as problematic. This affects an unknown function of the component Dataflow Profile. Executing a manipulation can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-128029. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More