35 matches found
CVE-2022-36432
CVE-2022-36432 प्रीव्यू कार्यक्षमता में क्रॉस-साइट स्क्रिप्टिंग XSS - Amasty Blog Pro for Magento 2 विवरण Magento 2 के लिए Amasty Blog Pro 2.10.3 प्लगइन में प्रीव्यू कार्यक्षमता eval का असुरक्षित उपयोग करती है। इससे हमलावर जनरेट किए गए प्रीव्यू एप्लिकेशन प्रतिक्रिया में हेरफेर करके एडमिन पैनल...
CVE-2022-36433
CVE-2022-36433 Cross-site Scripting XSS na funcionalidade de criação de postagens de blog no Amasty Blog Pro para Magento 2 Descrição A funcionalidade de criação de postagens de blog no plugin Amasty Blog Pro 2.10.3 para Magento 2 permite a injeção de código JavaScript nos campos shortcontent e...
CVE-2022-35501
CVE-2022-35501 ثغرة تخزينية لتنفيذ البرامج النصية عبر المواقع XSS في وظيفة إنشاء منشور المدونة في ملحق Amasty Blog Pro لمتجر Magento 2 الوصف وظيفة إنشاء المنشور في ملحق Amasty Blog Pro الإصدارين 2.10.3 و2.10.4 لمتجر Magento 2 تسمح بحقن كود JavaScript في حقل title، مما يؤدي إلى هجمات XSS ضد مستخدم...
CVE-2022-35500
CVE-2022-35500 Cross-site Scripting XSS Armazenado na funcionalidade de deixar comentário no Amasty Blog Pro for Magento 2 Descrição A funcionalidade de deixar comentário no plugin Amasty Blog Pro 2.10.3 e 2.10.4 para Magento 2 permite a injeção de código JavaScript na mutação AmBlogLeaveComment ...
CVE-2022-35501
Stored Cross-site Scripting XSS exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function...
EUVD-2022-38389
Malicious code in bioql PyPI...
EUVD-2022-39145
Malicious code in bioql PyPI...
EUVD-2022-39144
Malicious code in bioql PyPI...
CVE-2022-36433
The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...
CVE-2022-36432
The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site Scripting attacks on admin panel users by manipulating the generated preview application response...
Amasty Blog Pro for Magento 2 Cross-Site Scripting Vulnerability
Amasty Blog is a website page extension from Amasty. magento2 is an open source PHP e-commerce system. Amasty Blog Pro 2.10.5 before the version for Magento 2 has a cross-site scripting vulnerability , the vulnerability stems from the plugin in the blog post creation function fails to shortconten...
CVE-2022-36433
The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...
CVE-2022-36433
The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...
Design/Logic Flaw
The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...
Amasty Blog 跨站脚本漏洞
Amasty Blog is a website page extension from Amasty. magento2 is an open source PHP e-commerce system. Amasty Blog Pro 2.10.5 before the version for Magento 2 has a cross-site scripting vulnerability , the vulnerability stems from the plugin in the blog post creation function fails to shortconten...
CVE-2022-36433
The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...
CVE-2022-36433
The CVE-2022-36433 entry concerns Amasty Blog Pro for Magento 2 (version 2.10.3) where the blog-post creation functionality permits JavaScript injection in the short_content and full_content fields, enabling XSS against admin users via posts/preview or posts/save. Root cause is unfiltered content...
Amasty Blog commenting feature cross-site scripting vulnerability
Amasty Blog is a web page extension of Amasty Inc. A cross-site scripting vulnerability exists in the commenting functionality of Amasty Blog Pro version 2.10.3, which can be exploited by attackers to inject cross-site code and launch XSS attacks...