35 matches found
CVE-2022-36432
CVE-2022-36432 ثغرة برمجة نصية عبر المواقع XSS في وظيفة المعاينة في Amasty Blog Pro لـ Magento 2 الوصف تستخدم وظيفة المعاينة في إضافة Amasty Blog Pro 2.10.3 لـ Magento 2 الأمر eval بطريقة غير آمنة. وهذا يسمح للمهاجمين بتنفيذ هجمات البرمجة النصية عبر المواقع على مستخدمي لوحة الإدارة من خلال التلاع...
CVE-2022-36433
CVE-2022-36433 ثغرة برمجة نصية عبر المواقع XSS في وظيفة إنشاء مشاركات المدونة في Amasty Blog Pro لمتجر Magento 2 الوصف تسمح وظيفة إنشاء مشاركات المدونة في إضافة Amasty Blog Pro 2.10.3 لمتجر Magento 2 بحقن كود JavaScript في الحقول shortcontent و fullcontent، مما يؤدي إلى هجمات XSS ضد مستخدمي لوحة...
CVE-2022-35501
CVE-2022-35501 ثغرة تخزينية لتنفيذ البرامج النصية عبر المواقع XSS في وظيفة إنشاء منشور المدونة في ملحق Amasty Blog Pro لمتجر Magento 2 الوصف وظيفة إنشاء المنشور في ملحق Amasty Blog Pro الإصدارين 2.10.3 و2.10.4 لمتجر Magento 2 تسمح بحقن كود JavaScript في حقل title، مما يؤدي إلى هجمات XSS ضد مستخدم...
CVE-2022-35500
CVE-2022-35500 Cross-site Scripting XSS stocké dans la fonctionnalité de commentaire dans Amasty Blog Pro pour Magento 2 Description La fonctionnalité de commentaire dans les plugins Amasty Blog Pro 2.10.3 et 2.10.4 pour Magento 2 permet l'injection de code JavaScript dans la mutation...
CVE-2022-35501
Stored Cross-site Scripting XSS exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function...
EUVD-2022-38389
Malicious code in bioql PyPI...
EUVD-2022-39145
Malicious code in bioql PyPI...
EUVD-2022-39144
Malicious code in bioql PyPI...
CVE-2022-36433
The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...
CVE-2022-36432
The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site Scripting attacks on admin panel users by manipulating the generated preview application response...
Amasty Blog Pro for Magento 2 Cross-Site Scripting Vulnerability
Amasty Blog is a website page extension from Amasty. magento2 is an open source PHP e-commerce system. Amasty Blog Pro 2.10.5 before the version for Magento 2 has a cross-site scripting vulnerability , the vulnerability stems from the plugin in the blog post creation function fails to shortconten...
CVE-2022-36433
The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...
CVE-2022-36433
The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...
Design/Logic Flaw
The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...
Amasty Blog 跨站脚本漏洞
Amasty Blog is a website page extension from Amasty. magento2 is an open source PHP e-commerce system. Amasty Blog Pro 2.10.5 before the version for Magento 2 has a cross-site scripting vulnerability , the vulnerability stems from the plugin in the blog post creation function fails to shortconten...
CVE-2022-36433
The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the shortcontent and fullcontent fields, leading to XSS attacks against admin panel users via posts/preview or posts/save...
CVE-2022-36433
The CVE-2022-36433 entry concerns Amasty Blog Pro for Magento 2 (version 2.10.3) where the blog-post creation functionality permits JavaScript injection in the short_content and full_content fields, enabling XSS against admin users via posts/preview or posts/save. Root cause is unfiltered content...
Amasty Blog commenting feature cross-site scripting vulnerability
Amasty Blog is a web page extension of Amasty Inc. A cross-site scripting vulnerability exists in the commenting functionality of Amasty Blog Pro version 2.10.3, which can be exploited by attackers to inject cross-site code and launch XSS attacks...