[MEDIUM] Magento LTS vulnerable to stored Cross-site Scripting (XSS) in admin system configs

PKSA-w1pc-fvwg-8vsf CVE-2024-41676 GHSA-5vrp-638w-p8m2

Affected version: <20.10.1

Reported by:
GitHub

[MEDIUM] Magento LTS vulnerable to stored XSS in admin file form

PKSA-7kjg-jm3v-dfw2 GHSA-gp6m-fq6h-cjcx

Affected version: <19.5.3|>=20.0.0,<20.5.0

Reported by:
GitHub