[MEDIUM] Magento LTS: Reflected XSS - Import -> Data Flow (profiles)

PKSA-j61z-h6ts-jp8k CVE-2026-42458 GHSA-x8jv-q8j2-487c

Affected package: openmage/magento-lts

Affected version: <=20.17.0

Reported by:
GitHub