Critical vulnerabilities patched in Magento e-commerce platform
If you're running an online shop based on the Magento e-commerce platform, it's a good idea to update it as soon as possible. The latest patches fix critical vulnerabilities that could allow attackers to hijack administrative accounts.
One issue was discovered by researchers from Web security firm Sucuri and stems from improper validation of email addresses in the customer registration form.
The flaw allows a malicious user to include JavaScript code in the email field, leading to a so-called s
Read more »