Lucene search
PRIOn knowledge basePRION:CVE-2022-36433HistoryNov 29, 2022 - 1:15 p.m.
Design/Logic Flaw
2022-11-2913:15:00
PRIOn knowledge base
www.prio-n.com
2
amasty blog pro
design flaw
xss attacks
blog-post creation
magento 2
admin panel users
The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the short_content and full_content fields, leading to XSS attacks against admin panel users via posts/preview or posts/save.
| CPE | Name | Operator | Version |
|---|---|---|---|
| amasty_blog_pro | lt | 2.10.5 |
Related
nvd
nvd
CVE-2022-36433
2022-11-29 13:15:10
cvelist
cvelist
CVE-2022-36433
2022-11-29 00:00:00
cve
cve
CVE-2022-36433
2022-11-29 13:15:10
cnvd
cnvd
Amasty Blog Pro for Magento 2 Cross-Site Scripting Vulnerability
2022-11-30 00:00:00