[MEDIUM] OpenMage vulnerable to XSS in Admin Notifications

PKSA-t425-mpgn-4yhs CVE-2025-64174 GHSA-qv78-c8hc-438r

Affected package: openmage/magento-lts

Affected version: <20.16.0

Reported by:
GitHub