Lucene search
+L

117 matches found

CVE
CVE
added 2025/01/04 12:0 a.m.72 views

CVE-2025-22388

Optimizely EPiServer.CMS.Core prior to version 12.22.0 contains a Stored Cross-Site Scripting (XSS) vulnerability in the CMS, affecting areas such as content editing, link management, and file uploads. The issue allows an attacker to inject and execute arbitrary JavaScript, which could compromise...

5.7CVSS5.5AI score0.00325EPSS
SaveExploits0References1Affected Software1
Cvelist
Cvelist
added 2025/01/04 12:0 a.m.25 views

CVE-2025-22389

An issue was discovered in Optimizely EPiServer.CMS.Core before 12.32.0. A medium-severity vulnerability exists in the CMS, where the application does not properly validate uploaded files. This allows the upload of potentially malicious file types, including .docm .html. When accessed by...

0.00489EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/18 6:15 a.m.4 views

CVE-2024-56175

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in list item names...

6.1CVSS5.8AI score0.00233EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/18 6:15 a.m.19 views

CVE-2024-56175

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in list item names...

6.1CVSS0.00233EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/18 6:15 a.m.7 views

CVE-2024-56174

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in search history...

8.1CVSS5.8AI score0.00372EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/18 6:15 a.m.19 views

CVE-2024-56173

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from JavaScript in an SVG document...

4.7CVSS0.00273EPSS
SaveExploits0References1
OSV
OSV
added 2024/12/18 6:15 a.m.3 views

CVE-2024-56173

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from JavaScript in an SVG document...

4.7CVSS5.8AI score0.00273EPSS
SaveExploits0References1
NVD
NVD
added 2024/12/18 6:15 a.m.35 views

CVE-2024-56174

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in search history...

8.1CVSS0.00372EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/18 12:0 a.m.58 views

CVE-2024-56174

Optimizely Configured Commerce prior to 5.2.2408 is affected by a stored XSS due to client-side template injection in search history. The vulnerability arises from storing malicious payloads that may be executed in users’ browsers under certain conditions. Affected software: Optimizely Configured...

8.1CVSS6.2AI score0.00372EPSS
SaveExploits0References1Affected Software1
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.6 views

Optimizely Configured Commerce 安全漏洞

Optimizely Configured Commerce is a combined commerce platform from Optimizely, Inc. A security vulnerability exists in Optimizely Configured Commerce prior to version 5.2.2408, which stems from the inclusion of a stored cross-site scripting vulnerability...

8.1CVSS5.9AI score0.00372EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.8 views

Optimizely Configured Commerce 安全漏洞

Optimizely Configured Commerce is a combined commerce platform from Optimizely, Inc. A security vulnerability exists in Optimizely Configured Commerce prior to version 5.2.2408, which stems from the inclusion of a stored cross-site scripting vulnerability...

6.1CVSS5.9AI score0.00233EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
added 2024/12/18 12:0 a.m.16 views

PT-2024-36730 · Optimizely · Optimizely Configured Commerce

Name of the Vulnerable Software and Affected Versions: Optimizely Configured Commerce versions prior to 5.2.2408 Description: The issue allows malicious payloads to be stored and subsequently executed in users' browsers under specific conditions. This is a result of XSS from JavaScript in an SVG...

4.7CVSS5.3AI score0.00273EPSS
SaveExploits0References8
Cvelist
Cvelist
added 2024/12/18 12:0 a.m.21 views

CVE-2024-56175

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in list item names...

0.00233EPSS
SaveExploits0References1
CVE
CVE
added 2024/12/18 12:0 a.m.62 views

CVE-2024-56173

Optimizely Configured Commerce (before 5.2.2408) is affected by a stored XSS vulnerability: malicious payloads can be stored and later executed in users’ browsers via JavaScript in an SVG document under certain conditions. Root cause: XSS in SVG handling. Impact is browser-side compromise of affe...

4.7CVSS5.9AI score0.00273EPSS
SaveExploits0References1Affected Software1
CVE
CVE
added 2024/12/18 12:0 a.m.62 views

CVE-2024-56175

CVE-2024-56175 affects Optimizely Configured Commerce prior to 5.2.2408. The vulnerability arises from a client-side template injection in list item names, enabling stored XSS where malicious payloads can be stored and later executed in users’ browsers under specific conditions. Affected versions...

6.1CVSS6.2AI score0.00233EPSS
SaveExploits0References1Affected Software1
Vulnrichment
Vulnrichment
added 2024/12/18 12:0 a.m.12 views

CVE-2024-56173

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from JavaScript in an SVG document...

5.9AI score0.00273EPSS
SaveExploits0References1
Cvelist
Cvelist
added 2024/12/18 12:0 a.m.19 views

CVE-2024-56174

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in search history...

0.00372EPSS
SaveExploits0References1
CNNVD
CNNVD
added 2024/12/18 12:0 a.m.7 views

Optimizely Configured Commerce 安全漏洞

Optimizely Configured Commerce is a combined commerce platform from Optimizely, Inc. A security vulnerability exists in Optimizely Configured Commerce prior to version 5.2.2408, which stems from the inclusion of a stored cross-site scripting vulnerability...

4.7CVSS5.9AI score0.00273EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/18 12:0 a.m.11 views

CVE-2024-56174

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in search history...

6.2AI score0.00372EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
added 2024/12/18 12:0 a.m.11 views

CVE-2024-56175

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in list item names...

6.2AI score0.00233EPSS
SaveExploits0References1
Rows per page
Query Builder