Hackers Exploit Magento Bug to Steal Payment Data from E-commerce Websites

Threat actors have been found exploiting a critical flaw in Magento to inject a persistent backdoor into e-commerce websites.
The attack leverages CVE-2024-20720 (CVSS score: 9.1), which has been described by Adobe as a case of "improper neutralization of special elements" that could pave the way for arbitrary code execution.
It was addressed by the company as part of

adobe arbitrary code attack backdoor bug case code commerce critical critical flaw cve cve-2024 cvss cvss score data e-commerce exploit exploiting flaw found hackers hackers exploit inject magento payment persistent score special steal threat threat actors websites