Expression list for malicious code input filter extended to avoid XSS and SQL injection

Regular expression list for JavaScript attributes and HTML tags were missing elements.

This vulnerability affects the following application versions:

• Magento 1.9.1.1
• Magento 1.9.2.0
• Magento 1.9.2.1
• Magento 1.9.2.2
• Magento 1.9.2.3
• Magento 1.9.2.4
• Magento 1.9.3.0
• Magento 1.9.3.1
• Magento 1.9.3.2
• Magento 1.9.3.3
• Magento 1.9.3.4
• Magento 1.9.3.6
• Magento 1.9.3.7
• Magento 1.9.3.8
• Magento 1.9.3.9
• Magento 1.9.3.10
• Magento 1.9.4.0
• Magento 1.9.4.1
• Magento 1.9.4.2
• Magento 1.9.4.3