Adobe Commerce Stored XSS Arbitrary code execution
55Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendcvss 10epss 10%
from disclosure to weapon0 days
Published on NVDOct 14
1st PoCOct 14
exploitation probability
10%top 5% of all CVEs
observed exploitation
nono source reports it
1 public exploit(s)
Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Affected products
Adobe · Magento Commercepublic PoCs found — 1
githubgithub.com/EmicoEcommerce/Magento-APSB22-48-Security-Patches★ 37⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.