Cross site scripting

2022-11-2317:15:00

PRIOn knowledge base

www.prio-n.com

stored cross-site scripting

amasty blog pro

magento 2

duplicate post

0.001 Low

EPSS

Percentile

22.7%

Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function.

CPENameOperatorVersion
blog_proeq2.10.3
blog_proeq2.10.4

CPE	Name	Operator	Version
	blog_pro	eq	2.10.3
	blog_pro	eq	2.10.4

References

amasty.com

github.com/afine-com/CVE-2022-35501

0.001 Low

EPSS

Percentile

22.7%

Related for PRION:CVE-2022-35501