Lucene search
MitreCVELIST:CVE-2022-36432HistoryNov 17, 2022 - 12:00 a.m.
CVE-2022-36432
2022-11-1700:00:00
mitre
www.cve.org
amasty blog pro
magento 2
cross-site scripting
0.001 Low
EPSS
Percentile
24.8%
The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site Scripting attacks on admin panel users by manipulating the generated preview application response.
References
Related
nvd
nvd
CVE-2022-36432
2022-11-17 05:15:14
prion
prion
Cross site scripting
2022-11-17 05:15:00
cve
cve
CVE-2022-36432
2022-11-17 05:15:14