← All advisories

Medium severity5.4NVD Advisory· Published Nov 23, 2022· Updated Jul 9, 2026

CVE-2022-35501

CVE-2022-35501

Description

Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4

Amasty/Blog Pro4 versions
cpe:2.3:a:amasty:blog_pro:2.10.3:*:*:*:*:magento:*:*+ 3 more
- cpe:2.3:a:amasty:blog_pro:2.10.3:*:*:*:*:magento:*:*
- cpe:2.3:a:amasty:blog_pro:2.10.4:*:*:*:*:magento:*:*
- (no CPE)
- (no CPE)range: 2.10.3, 2.10.4

Patches

Vulnerability mechanics

News mentions

0

No linked articles in our index yet.