CVE-2026-128041 | OpenMage magento-lts up to 20.18.1/21.0.0-beta2 RSS Feed cross site scripting

November 13, 2026 Yanac

A vulnerability classified as problematic has been found in OpenMage magento-lts up to 20.18.1/21.0.0-beta2. This vulnerability affects unknown code of the component RSS Feed. The manipulation leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-128041. The attack is possible to be carried out remotely. No exploit exists.

It is recommended to upgrade the affected component.VulDB Recent EntriesRead More