Magento is prone to the following security vulnerabilities.
1. An HTML-injection vulnerability
2. Multiple remote-code execution vulnerabilities
3. A local file-include vulnerability
4. An arbitrary-file Delete vulnerability
Attackers can exploit these issues to steal cookie-based authentication credentials, to execute arbitrary scripts in the context of the web browser, to execute arbitrary code, delete arbitrary files and perform unauthorized actions.
Information
Magento Magento 2.0.16
Magento Magento 2.2
Magento Magento 1.9.3.6
Magento Magento 1.9.2.4
Magento Magento 1.9.2.3
Magento Magento 1.9.2.2
Magento Magento 1.9.2.1
Magento Magento 1.9.2.0
Magento Magento 1.9.0.1
Magento Magento 1.14.3.6
Magento Magento 1.14.3.4
Magento Magento 1.14.2.3
Magento Magento 1.14.2.0
Magento Magento 2.1.10
Magento Magento 2.0.17
Magento Magento 1.9.3.7
Exploit
The researcher has created a proof-of-concept to demonstrate these issues. Please see the references for more information.