Lucene search
+L

35 matches found

Kitploit
Kitploit
added 2026/08/25 2:36 a.m.3 views

CVE-2022-36432

CVE-2022-36432 प्रीव्यू कार्यक्षमता में क्रॉस-साइट स्क्रिप्टिंग XSS - Amasty Blog Pro for Magento 2 विवरण Magento 2 के लिए Amasty Blog Pro 2.10.3 प्लगइन में प्रीव्यू कार्यक्षमता eval का असुरक्षित उपयोग करती है। इससे हमलावर जनरेट किए गए प्रीव्यू एप्लिकेशन प्रतिक्रिया में हेरफेर करके एडमिन पैनल...

5.4CVSS5.6AI score0.00538EPSS
SaveExploits1References1
Kitploit
Kitploit
added 2026/08/25 12:37 a.m.2 views

CVE-2022-36433

CVE-2022-36433 Cross-site Scripting XSS na funcionalidade de criação de postagens de blog no Amasty Blog Pro para Magento 2 Descrição A funcionalidade de criação de postagens de blog no plugin Amasty Blog Pro 2.10.3 para Magento 2 permite a injeção de código JavaScript nos campos shortcontent e...

6.1CVSS6AI score0.0057EPSS
SaveExploits1
Kitploit
Kitploit
added 2026/08/25 12:37 a.m.2 views

CVE-2022-35501

CVE-2022-35501 ثغرة تخزينية لتنفيذ البرامج النصية عبر المواقع XSS في وظيفة إنشاء منشور المدونة في ملحق Amasty Blog Pro لمتجر Magento 2 الوصف وظيفة إنشاء المنشور في ملحق Amasty Blog Pro الإصدارين 2.10.3 و2.10.4 لمتجر Magento 2 تسمح بحقن كود JavaScript في حقل title، مما يؤدي إلى هجمات XSS ضد مستخدم...

5.4CVSS5.5AI score0.00486EPSS
SaveExploits0
Kitploit
Kitploit
added 2026/08/25 12:36 a.m.3 views

CVE-2022-35500

CVE-2022-35500 Cross-site Scripting XSS Armazenado na funcionalidade de deixar comentário no Amasty Blog Pro for Magento 2 Descrição A funcionalidade de deixar comentário no plugin Amasty Blog Pro 2.10.3 e 2.10.4 para Magento 2 permite a injeção de código JavaScript na mutação AmBlogLeaveComment ...

5.4CVSS5.6AI score0.00486EPSS
SaveExploits0
RedhatCVE
RedhatCVE
added 2026/01/09 10:39 a.m.24 views

CVE-2022-35501

Stored Cross-site Scripting XSS exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function...

5.4CVSS6AI score0.00486EPSS
SaveExploits0References1
EUVD
EUVD
added 2025/10/03 8:07 p.m.12 views

EUVD-2022-38389

Malicious code in bioql PyPI...

5.4CVSS5.6AI score0.00486EPSS
SaveExploits0References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2022-39145

Malicious code in bioql PyPI...

6.1CVSS6.3AI score0.0057EPSS
SaveExploits1References2
EUVD
EUVD
added 2025/10/03 8:07 p.m.9 views

EUVD-2022-39144

Malicious code in bioql PyPI...

5.4CVSS5.8AI score0.00538EPSS
SaveExploits1References1
RedhatCVE
RedhatCVE
added 2025/05/22 11:11 p.m.14 views

CVE-2022-36433

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...

6.1CVSS6.5AI score0.0057EPSS
SaveExploits1
RedhatCVE
RedhatCVE
added 2025/05/22 11:08 p.m.10 views

CVE-2022-36432

The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site Scripting attacks on admin panel users by manipulating the generated preview application response...

5.4CVSS6.6AI score0.00538EPSS
SaveExploits1
CNVD
CNVD
added 2022/11/30 12:00 a.m.104 views

Amasty Blog Pro for Magento 2 Cross-Site Scripting Vulnerability

Amasty Blog is a website page extension from Amasty. magento2 is an open source PHP e-commerce system. Amasty Blog Pro 2.10.5 before the version for Magento 2 has a cross-site scripting vulnerability , the vulnerability stems from the plugin in the blog post creation function fails to shortconten...

6.1CVSS6AI score0.0057EPSS
SaveExploits1References1
OSV
OSV
added 2022/11/29 1:15 p.m.9 views

CVE-2022-36433

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...

6.1CVSS5.8AI score0.0057EPSS
SaveExploits1References2
NVD
NVD
added 2022/11/29 1:15 p.m.36 views

CVE-2022-36433

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...

6.1CVSS0.0057EPSS
SaveExploits1References2
Prion
Prion
added 2022/11/29 1:15 p.m.26 views

Design/Logic Flaw

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...

5.8CVSS6.2AI score0.0057EPSS
SaveExploits1References2Affected Software1
CNNVD
CNNVD
added 2022/11/29 12:00 a.m.10 views

Amasty Blog 跨站脚本漏洞

Amasty Blog is a website page extension from Amasty. magento2 is an open source PHP e-commerce system. Amasty Blog Pro 2.10.5 before the version for Magento 2 has a cross-site scripting vulnerability , the vulnerability stems from the plugin in the blog post creation function fails to shortconten...

6.1CVSS5.9AI score0.0057EPSS
SaveExploits1References3
Vulnrichment
Vulnrichment
added 2022/11/29 12:00 a.m.11 views

CVE-2022-36433

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...

6.4AI score0.0057EPSS
SaveExploits1References2
CVE
CVE
added 2022/11/29 12:00 a.m.77 views

CVE-2022-36433

The CVE-2022-36433 entry concerns Amasty Blog Pro for Magento 2 (version 2.10.3) where the blog-post creation functionality permits JavaScript injection in the short_content and full_content fields, enabling XSS against admin users via posts/preview or posts/save. Root cause is unfiltered content...

6.1CVSS6.2AI score0.0057EPSS
SaveExploits1References2Affected Software1
CNVD
CNVD
added 2022/11/25 12:00 a.m.65 views

Amasty Blog commenting feature cross-site scripting vulnerability

Amasty Blog is a web page extension of Amasty Inc. A cross-site scripting vulnerability exists in the commenting functionality of Amasty Blog Pro version 2.10.3, which can be exploited by attackers to inject cross-site code and launch XSS attacks...

2.9AI score0.00486EPSS
SaveExploits0Affected Software1
NVD
NVD
added 2022/11/23 5:15 p.m.35 views

CVE-2022-35501

Stored Cross-site Scripting XSS exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function...

5.4CVSS0.00486EPSS
SaveExploits0References1
OSV
OSV
added 2022/11/23 5:15 p.m.11 views

CVE-2022-35501

Stored Cross-site Scripting XSS exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function...

5.4CVSS5.8AI score0.00486EPSS
SaveExploits0References2
Rows per page
Query Builder