Description
Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.
CVSS breakdown
CVSS 3.1
Attack Vector
Network
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
Changed
Confidentiality
High
Integrity
High
Availability
High
Affected products
- Adobe / Magento Commerceunspecified – 2.4.5
- Adobe / Magento Commerceunspecified – 2.4.4-p1
- Adobe / Magento Commerceunspecified – None
References
Updated 9m ago · 8 sources