Lucene search
+L

35 matches found

Kitploit
Kitploit
added 2026/08/25 2:36 a.m.3 views

CVE-2022-36432

CVE-2022-36432 ثغرة برمجة نصية عبر المواقع XSS في وظيفة المعاينة في Amasty Blog Pro لـ Magento 2 الوصف تستخدم وظيفة المعاينة في إضافة Amasty Blog Pro 2.10.3 لـ Magento 2 الأمر eval بطريقة غير آمنة. وهذا يسمح للمهاجمين بتنفيذ هجمات البرمجة النصية عبر المواقع على مستخدمي لوحة الإدارة من خلال التلاع...

5.4CVSS5.6AI score0.00538EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/25 12:37 a.m.2 views

CVE-2022-36433

CVE-2022-36433 ثغرة برمجة نصية عبر المواقع XSS في وظيفة إنشاء مشاركات المدونة في Amasty Blog Pro لمتجر Magento 2 الوصف تسمح وظيفة إنشاء مشاركات المدونة في إضافة Amasty Blog Pro 2.10.3 لمتجر Magento 2 بحقن كود JavaScript في الحقول shortcontent و fullcontent، مما يؤدي إلى هجمات XSS ضد مستخدمي لوحة...

6.1CVSS6AI score0.0057EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 12:37 a.m.1 views

CVE-2022-35501

CVE-2022-35501 ثغرة تخزينية لتنفيذ البرامج النصية عبر المواقع XSS في وظيفة إنشاء منشور المدونة في ملحق Amasty Blog Pro لمتجر Magento 2 الوصف وظيفة إنشاء المنشور في ملحق Amasty Blog Pro الإصدارين 2.10.3 و2.10.4 لمتجر Magento 2 تسمح بحقن كود JavaScript في حقل title، مما يؤدي إلى هجمات XSS ضد مستخدم...

5.4CVSS5.5AI score0.00486EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 12:36 a.m.2 views

CVE-2022-35500

CVE-2022-35500 Cross-site Scripting XSS stocké dans la fonctionnalité de commentaire dans Amasty Blog Pro pour Magento 2 Description La fonctionnalité de commentaire dans les plugins Amasty Blog Pro 2.10.3 et 2.10.4 pour Magento 2 permet l'injection de code JavaScript dans la mutation...

5.4CVSS5.6AI score0.00486EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/09 10:39 a.m.24 views

CVE-2022-35501

Stored Cross-site Scripting XSS exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function...

5.4CVSS6AI score0.00486EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2022-38389

Malicious code in bioql PyPI...

5.4CVSS5.6AI score0.00486EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2022-39145

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.0057EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2022-39144

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00538EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:11 p.m.14 views

CVE-2022-36433

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...

6.1CVSS6.5AI score0.0057EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/22 11:08 p.m.10 views

CVE-2022-36432

The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site Scripting attacks on admin panel users by manipulating the generated preview application response...

5.4CVSS6.6AI score0.00538EPSS
SaveExploits1
CNVD
CNVD
added 2022/11/30 12:00 a.m.104 views

Amasty Blog Pro for Magento 2 Cross-Site Scripting Vulnerability

Amasty Blog is a website page extension from Amasty. magento2 is an open source PHP e-commerce system. Amasty Blog Pro 2.10.5 before the version for Magento 2 has a cross-site scripting vulnerability , the vulnerability stems from the plugin in the blog post creation function fails to shortconten...

6.1CVSS6AI score0.0057EPSS
SaveExploits1References1
OSV
OSV
added 2022/11/29 1:15 p.m.9 views

CVE-2022-36433

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...

6.1CVSS5.8AI score0.0057EPSS
SaveExploits1References2
NVD
NVD
added 2022/11/29 1:15 p.m.36 views

CVE-2022-36433

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...

6.1CVSS0.0057EPSS
SaveExploits1References2
Prion
Prion
added 2022/11/29 1:15 p.m.26 views

Design/Logic Flaw

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...

5.8CVSS6.2AI score0.0057EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/11/29 12:00 a.m.10 views

Amasty Blog 跨站脚本漏洞

Amasty Blog is a website page extension from Amasty. magento2 is an open source PHP e-commerce system. Amasty Blog Pro 2.10.5 before the version for Magento 2 has a cross-site scripting vulnerability , the vulnerability stems from the plugin in the blog post creation function fails to shortconten...

6.1CVSS5.9AI score0.0057EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2022/11/29 12:00 a.m.11 views

CVE-2022-36433

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...

6.4AI score0.0057EPSS
SaveExploits1References2
CVE
CVE
added 2022/11/29 12:00 a.m.77 views

CVE-2022-36433

The CVE-2022-36433 entry concerns Amasty Blog Pro for Magento 2 (version 2.10.3) where the blog-post creation functionality permits JavaScript injection in the short_content and full_content fields, enabling XSS against admin users via posts/preview or posts/save. Root cause is unfiltered content...

6.1CVSS6.2AI score0.0057EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2022/11/25 12:00 a.m.65 views

Amasty Blog commenting feature cross-site scripting vulnerability

Amasty Blog is a web page extension of Amasty Inc. A cross-site scripting vulnerability exists in the commenting functionality of Amasty Blog Pro version 2.10.3, which can be exploited by attackers to inject cross-site code and launch XSS attacks...

2.9AI score0.00486EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2022/11/23 5:15 p.m.35 views

CVE-2022-35501

Stored Cross-site Scripting XSS exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function...

5.4CVSS0.00486EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/23 5:15 p.m.11 views

CVE-2022-35501

Stored Cross-site Scripting XSS exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function...

5.4CVSS5.8AI score0.00486EPSS
SaveExploits0References2
Rows per page
Query Builder