Magento has released new versions of Magento Commerce and Magento Open Source to increase product security:
Magento Commerce 18.104.22.168
Magento Open Source 22.214.171.124
SUPEE-10415 (patch for earlier Magento 1.x versions)
These releases contain multiple security changes that help close cross-site scripting and authenticated Admin user remote code execution vulnerabilities. We strongly recommend that all merchants upgrade to these versionsas soon as is reasonably possible.