CVE-2022-36432

CVE-2022-36432 affects Amasty Blog Pro 2.10.3 for Magento 2. The Preview functionality uses eval unsafely, enabling Cross-site Scripting on admin panel users by manipulating the generated preview response. Root cause is unsafe use of eval in the preview flow. Human interaction is required (UI: R)...

PT-2022-23366 · Amasty +1 · Amasty Blog Pro +1

Name of the Vulnerable Software and Affected Versions: Amasty Blog Pro version 2.10.3 Description: The Preview functionality in the Amasty Blog Pro plugin for Magento 2 uses eval unsafely, allowing attackers to perform Cross-site Scripting attacks on admin panel users by manipulating the generate...

CVE-2022-36432

The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site Scripting attacks on admin panel users by manipulating the generated preview application response...

CVE-2022-36432

The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site Scripting attacks on admin panel users by manipulating the generated preview application response...

Magento Open Source 跨站脚本漏洞

Magento Open Source is designed to provide basic e-commerce functionality, allowing you to build unique online stores from scratch. A security vulnerability exists in the Amasty Blog Pro plugin for Magento Open Source that stems from the unsafe use of eval...