Magento has released new versions of Magento Commerce and Magento Open Source to increase product security:
Magento Commerce 184.108.40.206
Magento Open Source 220.127.116.11
SUPEE-10415 (patch for earlier Magento 1.x versions)
These releases contain multiple security changes that help close cross-site scripting and authenticated Admin user remote code execution vulnerabilities. We strongly recommend that all merchants upgrade to these versionsas soon as is reasonably possible.