CVE-2014-9758

Cross-site scripting (XSS) vulnerability in Magento E-Commerce Platform 1.9.0.1.

• CWE-79

• http://appcheck-ng.com/unpatched-vulnerabilites-in-magento-e-commerce-platform/Exploit, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/12/05/4Mailing List, VDB Entry
• http://appcheck-ng.com/unpatched-vulnerabilites-in-magento-e-commerce-platform/Exploit, Third Party Advisory
• http://www.openwall.com/lists/oss-security/2015/12/05/4Mailing List, VDB Entry

Published

Sep 20, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2014-9752Unrestricted file upload vulnerability in mods/_core/propert…
• CVE-2014-9753confirm.php in ATutor 2.2 and earlier allows remote attacker…9.8
• CVE-2014-9754The hardware VPN client in Viprinet MultichannelVPN Router 3…
• CVE-2014-9755The hardware VPN client in Viprinet MultichannelVPN Router 3…
• CVE-2014-9756The psf_fwrite function in file_io.c in libsndfile allows at…
• CVE-2014-9757The Ignite Realtime Smack XMPP API, as used in Atlassian Bam…
• CVE-2014-9759Incomplete blacklist vulnerability in the config_is_private …
• CVE-2014-9760Cross-site scripting (XSS) vulnerability in the displayLogin…6.1
• CVE-2014-9761Multiple stack-based buffer overflows in the GNU C Library (…
• CVE-2014-9762imlib2 before 1.4.7 allows remote attackers to cause a denia…
• CVE-2014-9763imlib2 before 1.4.7 allows remote attackers to cause a denia…
• CVE-2014-9764imlib2 before 1.4.7 allows remote attackers to cause a denia…