Vulnerabilities > Magento > Magento > 1.9.0.1

DATE CVE VULNERABILITY TITLE RISK
2017-12-30 CVE-2016-10704 Cross-site Scripting vulnerability in Magento
Magento Community Edition and Enterprise Edition before 2.0.10 and 2.1.x before 2.1.2 have XSS via e-mail templates that are mishandled during a preview, aka APPSEC-1503.
network
magento CWE-79
4.3
2017-09-20 CVE-2014-9758 Cross-site Scripting vulnerability in Magento 1.9.0.1
Cross-site scripting (XSS) vulnerability in Magento E-Commerce Platform 1.9.0.1.
network
magento CWE-79
4.3