Vulnerabilities

TI-2022-16045 CVE-2022-35501 · GHSA-354v-mvpg-vvr4

Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin…

LOW 25

Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00528 Published 2022-11-23 No fix listed CWE-79

TI-2022-16044 CVE-2022-35500 · GHSA-m8rq-4jjf-r23g

LOW 25

Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00528 Published 2022-11-23 No fix listed CWE-79

TI-2022-16759 CVE-2022-36432 · GHSA-5ffp-q72q-28rm

MEDIUM 58

The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00585 Published 2022-11-17 No fix listed CWE-79