medium4.7
CVE-2024-56173
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS…
Impact
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from JavaScript in an SVG document.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Optimizely | Configured Commerce | before 5.2.2408 |