CVE-2024-56173

Optimizely Configured Commerce versions prior to 5.2.2408 are vulnerable to a stored cross-site scripting (XSS) vulnerability. The root cause is the execution of JavaScript within an SVG document , which allows attackers to store and subsequently execute malicious payloads in users' browsers unde...