Medium severity5.4NVD Advisory· Published Nov 17, 2022· Updated Jun 17, 2026
CVE-2022-36432
CVE-2022-36432
Description
The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site Scripting attacks on admin panel users by manipulating the generated preview application response.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- Amasty/Blog Pro plugindescription
- Range: =2.10.3
Patches
Vulnerability mechanics
News mentions
0No linked articles in our index yet.