Magento has released new versions of Magento Commerce and Magento Open Source to increase product security:
Magento Commerce 22.214.171.124
Magento Open Source 126.96.36.199
SUPEE-10415 (patch for earlier Magento 1.x versions)
These releases contain multiple security changes that help close cross-site scripting and authenticated Admin user remote code execution vulnerabilities. We strongly recommend that all merchants upgrade to these versionsas soon as is reasonably possible.