Unpatched Magento Zero Day Leaves 200,000 Merchants Vulnerable

A popular version of the open source Magento ecommerce platform is vulnerable to a zero-day remote code execution vulnerability, putting as many as 200,000 online retailers at risk. The warning comes from security firm DefenseCode, which found and originally reported the vulnerability to Magento in November.

https://threatpost.com/high-risk-zero-day-leaves-200000-magento-merchants-vulnerable/124965/

https://it.slashdot.org/story/17/04/15/1937255/unpatched-magento-zero-day-leaves-200000-merchants-vulnerable