medium5.4
CVE-2022-35501
Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function.
Impact
Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Amasty | Blog Pro | Versions 2.10.3, 2.10.4 |