← All credits

Hanmac

9 vulnerability records and advisories credit this contributor.

CVE-2026-128051

OpenMage magento-lts before 20.18.2 Stored XSS via Product Name in MSRP Popup

CVE-2026-128046

OpenMage magento-lts 20.17.0 before 20.18.2 Unrestricted File Upload RCE via Custom Options

CVE-2026-128049

OpenMage Magento LTS before 20.18.2 CSRF via OAuth Authorization Confirm

CVE-2026-128048

OpenMage magento-lts before 20.18.2 Information Disclosure via Email Template getConfig

CVE-2026-128045

OpenMage Magento-LTS before 20.18.2 Authorization Bypass via Forgeable RSS Order Key

CVE-2026-128044

OpenMage magento-lts before 20.18.2 OAuth Callback URL Allowlist Bypass

CVE-2026-128041

OpenMage magento-lts before 20.18.2 Stored XSS via RSS Review Feed

CVE-2026-128040

OpenMage magento-lts before 20.18.2 Stored XSS via Admin Dataflow, Tax, OAuth, PayPal Fields

CVE-2026-128033

OpenMage magento-lts before 20.18.2 Information Disclosure via Order-Status RSS Feed