CVE-2022-35501

Severity: MEDIUM (CVSS 5.4)

Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post function.

Published: 2022-11-23
Last Modified: 2026-07-05

References:

• github.com/afine-com…
• amasty.com
• github.com/afine-com…

View Full CVE Details on NIST NVD →