CVSS 8.1 · High EPSS 1,0%
Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada adobe commerce. Skor CVSS 3.1 8.1 (High) menurut adobe.com.
Adobe Commerce versions 2.4.6-p4, 2.4.5-p6, 2.4.4-p7, 2.4.7-beta3 and earlier are affected by a stored Cross-Site Scripting (XSS) vulnerability that could be abused by a high-privileged attacker to inject malicious scripts into vulnerable form fields. Malicious JavaScript may be executed in a victim’s browser when they browse to the page containing the vulnerable field. Confidentiality and integrity are considered high due to having admin impact.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| adobe | commerce | Semua versi |
| adobe | commerce | Versi 2.3.7 |
| adobe | commerce | Versi 2.3.7 p1 |
| adobe | commerce | Versi 2.3.7 p2 |
| adobe | commerce | Versi 2.3.7 p3 |
| adobe | commerce | Versi 2.3.7 p4 |
| adobe | commerce | Versi 2.3.7 p4-ext1 |
| adobe | commerce | Versi 2.3.7 p4-ext2 |
| adobe | commerce | Versi 2.3.7 p4-ext3 |
| adobe | commerce | Versi 2.3.7 p4-ext4 |
| adobe | commerce | Versi 2.4.0 |
| adobe | commerce | Versi 2.4.0 ext-1 |
| adobe | commerce | Versi 2.4.0 ext-2 |
| adobe | commerce | Versi 2.4.0 ext-3 |
| adobe | commerce | Versi 2.4.0 ext-4 |
| adobe | commerce | Versi 2.4.1 |
| adobe | commerce | Versi 2.4.1 ext-1 |
| adobe | commerce | Versi 2.4.1 ext-2 |
| adobe | commerce | Versi 2.4.1 ext-3 |
| adobe | commerce | Versi 2.4.1 ext-4 |
| adobe | commerce | Versi 2.4.2 |
| adobe | commerce | Versi 2.4.2 ext-1 |
| adobe | commerce | Versi 2.4.2 ext-2 |
| adobe | commerce | Versi 2.4.2 ext-3 |
| adobe | commerce | Versi 2.4.2 ext-4 |
| adobe | commerce | Versi 2.4.2 ext-6 |
| adobe | commerce | Versi 2.4.2 p1 |
| adobe | commerce | Versi 2.4.2 p2 |
| adobe | commerce | Versi 2.4.3 |
| adobe | commerce | Versi 2.4.3 ext-1 |
| adobe | commerce | Versi 2.4.3 ext-2 |
| adobe | commerce | Versi 2.4.3 ext-3 |
| adobe | commerce | Versi 2.4.3 ext-4 |
| adobe | commerce | Versi 2.4.3 ext-6 |
| adobe | commerce | Versi 2.4.3 p1 |
| adobe | commerce | Versi 2.4.3 p2 |
| adobe | commerce | Versi 2.4.4 |
| adobe | commerce | Versi 2.4.4 p1 |
| adobe | commerce | Versi 2.4.4 p2 |
| adobe | commerce | Versi 2.4.4 p3 |
| adobe | commerce | Versi 2.4.4 p4 |
| adobe | commerce | Versi 2.4.4 p5 |
| adobe | commerce | Versi 2.4.4 p6 |
| adobe | commerce | Versi 2.4.4 p7 |
| adobe | commerce | Versi 2.4.5 |
| adobe | commerce | Versi 2.4.5 p1 |
| adobe | commerce | Versi 2.4.5 p2 |
| adobe | commerce | Versi 2.4.5 p3 |
| adobe | commerce | Versi 2.4.5 p4 |
| adobe | commerce | Versi 2.4.5 p5 |
| adobe | commerce | Versi 2.4.5 p6 |
| adobe | commerce | Versi 2.4.6 |
| adobe | commerce | Versi 2.4.6 p1 |
| adobe | commerce | Versi 2.4.6 p2 |
| adobe | commerce | Versi 2.4.6 p3 |
| adobe | commerce | Versi 2.4.6 p4 |
| adobe | commerce | Versi 2.4.7 |
| adobe | commerce | Versi 2.4.7 b1 |
| adobe | commerce | Versi 2.4.7 b2 |
| adobe | commerce | Versi 2.4.7 beta3 |