CVE-2022-36432

CVE-2022-36432 在 Amasty Blog Pro for Magento 2 的 Preview（预览）功能中存在跨站脚本（XSS）漏洞 描述 Amasty Blog Pro 2.10.3 插件（适用于 Magento 2）中的 Preview（预览）功能不安全地使用了 eval。攻击者可以通过操纵生成的预览应用程序响应，对管理面板用户执行跨站脚本攻击。 该漏洞存在于 blog/view/base/web/js/adminhtml/preview.js 文件中。 在参考资料中，你可以找到 Magento 2 中类似的已修复问题。 受影响版本 2.10.5 建议 将...

CVE-2022-36433

CVE-2022-36433 Amasty Blog Pro for Magento 2 中博客文章创建功能的跨站脚本（XSS） 描述 Amasty Blog Pro 2.10.3 插件（适用于 Magento 2）的博客文章创建功能允许在 shortcontent 和 fullcontent 字段中注入 JavaScript 代码，导致管理面板用户通过 posts/preview 或 posts/save 受到 XSS 攻击。 以下是上述参数的易受攻击端点（注入点）： POST /admin/amastyblog/posts/preview/key/somekey/?isAjax=tr...

CVE-2022-35501

CVE-2022-35501 Amasty Blog Pro for Magento 2 中博客文章创建功能存在存储型跨站脚本（XSS）漏洞 描述 Amasty Blog Pro 2.10.3 和 2.10.4 插件（适用于 Magento 2）的文章创建功能允许在 title 字段中注入 JavaScript 代码，通过复制文章功能导致针对管理面板用户的 XSS 攻击，该功能使用了 data.title 字段并执行了 JavaScript 代码。 受影响端点（上述参数的注入点）： POST /admin/amastyblog/posts/save/key/somekey/ 受影响版本...

CVE-2022-35500

CVE-2022-35500 Cross-Site Scripting XSS almacenado en la funcionalidad de dejar comentarios en Amasty Blog Pro para Magento 2 Descripción La funcionalidad de dejar comentarios en el plugin Amasty Blog Pro 2.10.3 y 2.10.4 para Magento 2 permite la inyección de código JavaScript en la mutación...

CVE-2022-35500

Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting XSS via leave comment functionality...

CVE-2022-35501

Stored Cross-site Scripting XSS exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function...

EUVD-2022-38389

Malicious code in bioql PyPI...

EUVD-2022-39145

Malicious code in bioql PyPI...

EUVD-2022-39144

Malicious code in bioql PyPI...

EUVD-2022-38388

Malicious code in bioql PyPI...

CVE-2022-36433

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...

CVE-2022-36432

The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site Scripting attacks on admin panel users by manipulating the generated preview application response...

Amasty Blog Pro for Magento 2 Cross-Site Scripting Vulnerability

Amasty Blog is a website page extension from Amasty. magento2 is an open source PHP e-commerce system. Amasty Blog Pro 2.10.5 before the version for Magento 2 has a cross-site scripting vulnerability , the vulnerability stems from the plugin in the blog post creation function fails to shortconten...

CVE-2022-36433

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...

CVE-2022-36433

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...

Design/Logic Flaw

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...

Amasty Blog 跨站脚本漏洞

Amasty Blog is a website page extension from Amasty. magento2 is an open source PHP e-commerce system. Amasty Blog Pro 2.10.5 before the version for Magento 2 has a cross-site scripting vulnerability , the vulnerability stems from the plugin in the blog post creation function fails to shortconten...

CVE-2022-36433

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...

CVE-2022-36433

The CVE-2022-36433 entry concerns Amasty Blog Pro for Magento 2 (version 2.10.3) where the blog-post creation functionality permits JavaScript injection in the short_content and full_content fields, enabling XSS against admin users via posts/preview or posts/save. Root cause is unfiltered content...

Amasty Blog Create Post Function Cross-Site Scripting Vulnerability

Amasty Blog is a website page extension for Amasty, Inc. A cross-site scripting vulnerability exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plug-ins, which can be exploited by attackers to inject cross-site code and launch XSS attacks...