2 matches found
CVE-2024-56175
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in list item names...
6.1CVSS5.8AI score0.00239EPSS
SaveExploits0References1
CVE-2024-56175: Improper Neutralization of Input During Web Page Generation
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in list item names...
6.1CVSS5.7AI score0.00239EPSS
SaveExploits0References1
20