CVSS 8.1 · High EPSS 0,94%
Kerentanan Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') pada adobe commerce. Skor CVSS 3.1 8.1 (High) menurut adobe.com.
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could be exploited to execute arbitrary code. If an admin attacker can trick a user into clicking a specially crafted link or submitting a form, malicious scripts may be executed within the context of the victim's browser and have high impact on confidentiality and integrity. Exploitation of this issue requires user interaction.
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:N
· uraikan di kalkulator | Vendor | Produk | Versi terdampak |
|---|---|---|
| adobe | commerce | Semua versi |
| adobe | commerce | Versi 2.3.7 |
| adobe | commerce | Versi 2.3.7 p1 |
| adobe | commerce | Versi 2.3.7 p2 |
| adobe | commerce | Versi 2.3.7 p3 |
| adobe | commerce | Versi 2.3.7 p4 |
| adobe | commerce | Versi 2.3.7 p4-ext1 |
| adobe | commerce | Versi 2.3.7 p4-ext2 |
| adobe | commerce | Versi 2.3.7 p4-ext3 |
| adobe | commerce | Versi 2.3.7 p4-ext4 |
| adobe | commerce | Versi 2.4.0 |
| adobe | commerce | Versi 2.4.0 ext-1 |
| adobe | commerce | Versi 2.4.0 ext-2 |
| adobe | commerce | Versi 2.4.0 ext-3 |
| adobe | commerce | Versi 2.4.0 ext-4 |
| adobe | commerce | Versi 2.4.1 |
| adobe | commerce | Versi 2.4.1 ext-1 |
| adobe | commerce | Versi 2.4.1 ext-2 |
| adobe | commerce | Versi 2.4.1 ext-3 |
| adobe | commerce | Versi 2.4.1 ext-4 |
| adobe | commerce | Versi 2.4.2 |
| adobe | commerce | Versi 2.4.2 ext-1 |
| adobe | commerce | Versi 2.4.2 ext-2 |
| adobe | commerce | Versi 2.4.2 ext-3 |
| adobe | commerce | Versi 2.4.2 ext-4 |
| adobe | commerce | Versi 2.4.2 p1 |
| adobe | commerce | Versi 2.4.2 p2 |
| adobe | commerce | Versi 2.4.3 |
| adobe | commerce | Versi 2.4.3 ext-1 |
| adobe | commerce | Versi 2.4.3 ext-2 |
| adobe | commerce | Versi 2.4.3 ext-3 |
| adobe | commerce | Versi 2.4.3 ext-4 |
| adobe | commerce | Versi 2.4.3 p1 |
| adobe | commerce | Versi 2.4.3 p2 |
| adobe | commerce | Versi 2.4.4 |
| adobe | commerce | Versi 2.4.4 p1 |
| adobe | commerce | Versi 2.4.4 p10 |
| adobe | commerce | Versi 2.4.4 p2 |
| adobe | commerce | Versi 2.4.4 p3 |
| adobe | commerce | Versi 2.4.4 p4 |
| adobe | commerce | Versi 2.4.4 p5 |
| adobe | commerce | Versi 2.4.4 p6 |
| adobe | commerce | Versi 2.4.4 p7 |
| adobe | commerce | Versi 2.4.4 p8 |
| adobe | commerce | Versi 2.4.4 p9 |
| adobe | commerce | Versi 2.4.5 |
| adobe | commerce | Versi 2.4.5 p1 |
| adobe | commerce | Versi 2.4.5 p2 |
| adobe | commerce | Versi 2.4.5 p3 |
| adobe | commerce | Versi 2.4.5 p4 |
| adobe | commerce | Versi 2.4.5 p5 |
| adobe | commerce | Versi 2.4.5 p6 |
| adobe | commerce | Versi 2.4.5 p7 |
| adobe | commerce | Versi 2.4.5 p8 |
| adobe | commerce | Versi 2.4.5 p9 |
| adobe | commerce | Versi 2.4.6 |
| adobe | commerce | Versi 2.4.6 p1 |
| adobe | commerce | Versi 2.4.6 p2 |
| adobe | commerce | Versi 2.4.6 p3 |
| adobe | commerce | Versi 2.4.6 p4 |