CVE-2022-36433

2022-11-2900:00:00

mitre

www.cve.org

cve-2022-36433

injection of javascript code

xss attacks

admin panel users

0.001 Low

EPSS

Percentile

31.7%

JSON

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the short_content and full_content fields, leading to XSS attacks against admin panel users via posts/preview or posts/save.

References

github.com/afine-com/CVE-2022-36433

weglow.ski

0.001 Low

EPSS

Percentile

31.7%

JSON

Related for CVELIST:CVE-2022-36433