Magnolia Dxp

1 CVE in 1 Magnolia Dxp product, including Magnolia Cms. Newest: CVE-2026-18478 (2026-08-10). Severity, EPSS and public exploits for each.

Magnolia Dxp products with known CVEs

ProductCVEs
Magnolia Cms1
Magnolia Dxp CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-184782026-08-10Magnolia CMS is vulnerable to Stored XSS in import functionality. An attacker with editor privileges can inject arbitrary HTML and JS into the name of uploaded…