Amasty

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Amasty records in CISA KEV

No Amasty vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

3 records in Blog Pro · all components

TI-2022-16759 CVE-2022-36432 · GHSA-5ffp-q72q-28rm

MEDIUM 58

The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00585 Published 2022-11-17 No fix listed CWE-79

TI-2022-16045 CVE-2022-35501 · GHSA-354v-mvpg-vvr4

LOW 25

Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00528 Published 2022-11-23 No fix listed CWE-79

TI-2022-16044 CVE-2022-35500 · GHSA-m8rq-4jjf-r23g

LOW 25

Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00528 Published 2022-11-23 No fix listed CWE-79