Adobe Commerce Cross-Site Scripting Vulnerability (CNVD-2023-82675)

Adobe Commerce is the United States of America Odobie (Adobe) company’s a kind of merchants and brands for the world’s leading digital commerce solutions. A cross-site scripting vulnerability exists in Adobe Commerce prior to version 2.4.7, which stems from the application’s lack of effective filtering and escaping of user-supplied data, and can be exploited by a low-privileged attacker to inject malicious script into vulnerable form fields. Malicious JavaScript may be executed in the victim’s browser when the victim views a page containing vulnerable fields.