Sign in Free account Free scan

Amasty records

4 published records for vendor amasty.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

22

Bar: total · dark part: CISA KEV.

Recurring classes

CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')4

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

4 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
24Monitor	CVE-2022-36433Proof of concept	The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the short_conamasty · amasty blog pro · CWE-79 Pre-auth XSS	Medium6.1	—	0.6%	Nov 29, 2022
21Monitor	CVE-2022-36432Proof of concept	The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely.amasty · blog pro · CWE-79 XSS	Medium5.4	—	0.5%	Nov 17, 2022
21Monitor	CVE-2022-35500Proof of concept	Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality.amasty · blog pro · CWE-79 XSS	Medium5.4	—	0.5%	Nov 22, 2022
21Monitor	CVE-2022-35501Proof of concept	Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post functioamasty · blog pro · CWE-79 XSS	Medium5.4	—	0.5%	Nov 23, 2022

CVE-2022-36433
24Monitor
The blog-post creation functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 allows injection of JavaScript code in the short_con
MediumCVSS 6.1Proof of conceptEPSS 0%
- Pre-auth
- XSS
amasty · amasty blog proNov 29, 2022
CVE-2022-36432
21Monitor
The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely.
MediumCVSS 5.4Proof of conceptEPSS 0%
- XSS
amasty · blog proNov 17, 2022
CVE-2022-35500
21Monitor
Amasty Blog 2.10.3 is vulnerable to Cross Site Scripting (XSS) via leave comment functionality.
MediumCVSS 5.4Proof of conceptEPSS 0%
- XSS
amasty · blog proNov 22, 2022
CVE-2022-35501
21Monitor
Stored Cross-site Scripting (XSS) exists in the Amasty Blog Pro 2.10.3 and 2.10.4 plugin for Magento 2 because of the duplicate post functio
MediumCVSS 5.4Proof of conceptEPSS 0%
- XSS
amasty · blog proNov 23, 2022