CVE-2026-47999

Name of the Vulnerable Software and Affected Versions Adobe Commerce (affected versions not specified) Magento Open Source (affected versions not specified) Adobe Commerce B2B (affected versions not specified)

Description Stored Cross-Site Scripting (XSS) occurs due to insufficient protection of the web page structure. A high-privileged attacker can inject malicious scripts into vulnerable form fields, which are then executed in the browser of a victim visiting the affected page. This flaw may allow a remote attacker to execute arbitrary code.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.