Detections
Analytics
SCA: security update for openmage/magento-lts (GHSA-5pxh-89cx-4668)
low Tenable Cloud Security Plugin ID 421027
Description
There are packages installed that are affected by a vulnerability referenced in the following CVE:- Magento Long Term Support (LTS) is an unofficial, community-driven project provides an alternative to the
Magento Community Edition e-commerce platform with a high level of backward compatibility. Versions prior
to 20.12.3 and 20.13.0 contain a vulnerability that allows script execution in the admin panel which could
lead to cross-site scripting against authenticated admin users. The attack requires an admin user with
configuration access, so in practicality it is not very likely to be useful given that a user with this
level of access is probably already a full admin. Versions 20.12.3 and 20.13.0 contain a patch for the
issue. (CVE-2025-27400)
See Also
Plugin Details
Severity: Low
ID: 421027
Version: Revision 1.16
Type: Local
Family: SCA Checks
Published: 3/4/2025
Updated: 7/2/2026
Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security
Risk Information
VPR
Risk Factor: Low
Score: 2.1
Percentile: 7.46
Vendor
Vendor Severity: Low
CVSS v2
Risk Factor: Low
Base Score: 2.7
Temporal Score: 2
Vector: CVSS2#AV:A/AC:H/Au:M/C:N/I:P/A:P
CVSS Score Source: CVE-2025-27400
CVSS v3
Risk Factor: Low
Base Score: 2.9
Temporal Score: 2.6
Vector: CVSS:3.0/AV:A/AC:H/PR:H/UI:R/S:U/C:N/I:L/A:L
Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C
Vulnerability Information
Exploit Ease: No known exploits are available
Patch Publication Date: 3/3/2025
Vulnerability Publication Date: 2/28/2025
Reference Information
CVE: CVE-2025-27400
cwe: CWE-79