High severity8.1NVD Advisory· Published Oct 10, 2024· Updated Jun 17, 2026
CVE-2024-45116
CVE-2024-45116
Description
Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a Cross-Site Scripting (XSS) vulnerability that could be exploited to execute arbitrary code. If an admin attacker can trick a user into clicking a specially crafted link or submitting a form, malicious scripts may be executed within the context of the victim's browser and have high impact on confidentiality and integrity. Exploitation of this issue requires user interaction.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
magento/community-editionPackagist | >= 2.4.7-beta1, < 2.4.7-p3 | 2.4.7-p3 |
magento/community-editionPackagist | >= 2.4.6-p1, < 2.4.6-p8 | 2.4.6-p8 |
magento/community-editionPackagist | >= 2.4.5-p1, < 2.4.5-p10 | 2.4.5-p10 |
magento/community-editionPackagist | < 2.4.4-p11 | 2.4.4-p11 |
Affected products
1180+ 81 more
- (no CPE)range: 0
- cpe:2.3:a:adobe:commerce:-:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.3.7:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.3.7:p1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.3.7:p2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.3.7:p3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.3.7:p4:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.3.7:p4-ext1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.3.7:p4-ext2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.3.7:p4-ext3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.3.7:p4-ext4:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.0:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.0:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.0:ext-1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.0:ext-2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.0:ext-3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.0:ext-4:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.1:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.1:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.1:ext-1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.1:ext-2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.1:ext-3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.1:ext-4:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.2:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.2:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.2:ext-1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.2:ext-2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.2:ext-3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.2:ext-4:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.2:p1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.2:p2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.3:*:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.3:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.3:ext-1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.3:ext-2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.3:ext-3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.3:ext-4:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.3:p1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.3:p2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p10:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p4:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p5:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p6:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p7:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p8:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.4:p9:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p4:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p5:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p6:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p7:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p8:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.5:p9:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p3:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p4:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p5:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p6:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.6:p7:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.7:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.7:b1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.7:b2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.7:p1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce:2.4.7:p2:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.3:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.3:p10:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.4:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.4:p9:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.5:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.3.5:p7:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.4.2:-:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.4.2:p1:*:*:*:*:*:*
- cpe:2.3:a:adobe:commerce_b2b:1.4.2:p2:*:*:*:*:*:*
cpe:2.3:a:adobe:magento:-:*:*:*:open_source:*:*:*+ 34 more
- cpe:2.3:a:adobe:magento:-:*:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.3:*:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:-:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p1:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p10:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p2:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p3:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p4:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p5:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p6:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p7:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p8:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.4:p9:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:-:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p1:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p2:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p3:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p4:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p5:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p6:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p7:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p8:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.5:p9:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:-:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p1:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p2:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p3:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p4:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p5:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p6:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.6:p7:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.7:-:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.7:b1:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.7:p1:*:*:open_source:*:*:*
- cpe:2.3:a:adobe:magento:2.4.7:p2:*:*:open_source:*:*:*
Patches
Vulnerability mechanics
References
3- github.com/advisories/GHSA-873m-72g6-853gghsaADVISORY
- helpx.adobe.com/security/products/magento/apsb24-73.htmlnvdVendor AdvisoryWEB
- nvd.nist.gov/vuln/detail/CVE-2024-45116ghsaADVISORY
News mentions
0No linked articles in our index yet.