CVE-2024-56175

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in list item names...

CVE-2024-56175

creationtimestamp| type| source ---|---|--- 2024-12-18 05:44:48+00:00| seen| https://infosec.exchange/users/cve/statuses/113672237100311929 2024-12-18 07:50:14+00:00| seen| https://t.me/cvedetector/13161...

CVE-2024-56175

Optimizely Configured Commerce versions prior to 5.2.2408 are vulnerable to a Stored Cross-Site Scripting (XSS) attack. The root cause is a client-side template injection occurring in list item names , which allows an attacker to store malicious payloads that execute in other users' browsers unde...