← Back

Amasty Blog Pro

amasty_blog_pro

Vendor: Amasty • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
1Amasty
1Amasty Blog Pro
Jun 17, 2026
Nov 29, 2022
N/A· v4
6.1 MEDIUM· v3
N/A· v2
The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the short_content and full_content fields, leading to XSS attacks against admin panel users v...Show more
The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the short_content and full_content fields, leading to XSS attacks against admin panel users via posts/preview or posts/save.Show less