4 matches found
CVE-2022-35501
Stored Cross-site Scripting XSS exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function...
5.4CVSS0.00491EPSS
SaveExploits0References1
CVE-2022-35501
Stored Cross-site Scripting XSS exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function...
5.3AI score0.00491EPSS
SaveExploits0References1
CVE-2022-35501
CVE-2022-35501 is confirmed with concrete details across multiple sources: a Stored Cross-site Scripting (XSS) vulnerability in Amasty Blog Pro for Magento 2, triggered by the duplicate post function. Affected versions are Amasty Blog Pro 2.10.3 and 2.10.4; the root cause is described as the dupl...
5.4CVSS5.3AI score0.00491EPSS
SaveExploits0References1Affected Software1
20