← All advisories

Medium severity5.4NVD Advisory· Published Nov 23, 2022· Updated Jul 9, 2026

CVE-2022-35500

CVE-2022-35500

Description

Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Amasty/Blogllm-fuzzy2 versions
2.10.3+ 1 more
- (no CPE)range: 2.10.3
- (no CPE)
Amasty/Blog Pro
cpe:2.3:a:amasty:blog_pro:2.10.3:*:*:*:*:magento:*:*

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.