Read the docs

Amasty

Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Amasty records in CISA KEV

No Amasty vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Blog Pro 3 records MEDIUM Amasty Blog Pro 1 record LOW

Records

1 record in Amasty Blog Pro · all components

TI-2022-16760 CVE-2022-36433 · GHSA-2v58-v85m-32w9

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2…

Priority LOW 28

The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the short_content and full_content fields, leading to XSS attacks against admin panel users v…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0062 Published 2022-11-29 No fix listed CWE-79
Open these records in search →