CVE-2024-56175

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in list item names...

CVE-2024-56175

creationtimestamp| type| source ---|---|--- 2024-12-18 05:44:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113672237100311929 2024-12-18 07:50:14+00:00| seen| https://t.me/cvedetector/13161...

CVE-2024-56175

CVE-2024-56175 affects Optimizely Configured Commerce prior to 5.2.2408. The vulnerability arises from a client-side template injection in list item names, enabling stored XSS where malicious payloads can be stored and later executed in users’ browsers under specific conditions. Affected versions...