E-commerce content management provider Magento issued several patches to fix XSS vulnerabilities that could have injected a malicious JavaScript code into the company's online ordering form allowing the system to be taken over remotely.

http://www.scmagazineuk.com/magento-issues-fixes-for-20-vulnerabilities-two-rated-critical/article/467231/?DCMP=EMC-SCUK_Newswire&spMailingID=13581173&spUserID=MjMzNTkzNTY1NwS2&spJobID=701849461&spReportId=NzAxODQ5NDYxS0