We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.

Please see our statement on Data Privacy.

Crisp.chat (Helpdesk and Chat)

Ok

THREATINT
PUBLISHED

CVE-2024-45123

Adobe Commerce | Cross-site Scripting (Reflected XSS) (CWE-79)



Description

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10 and earlier are affected by a reflected Cross-Site Scripting (XSS) vulnerability. If an attacker is able to convince a victim to visit a URL referencing a vulnerable page, malicious JavaScript content may be executed within the context of the victim's browser.

Reserved 2024-08-21 | Published 2024-10-10 | Updated 2024-10-10 | Assigner adobe


MEDIUM: 6.1CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Problem types

Cross-site Scripting (Reflected XSS) (CWE-79)

Product status

Default status
affected

Any version
affected

References

helpx.adobe.com/security/products/magento/apsb24-73.html vendor-advisory

cve.org (CVE-2024-45123)

nvd.nist.gov (CVE-2024-45123)

Download JSON

Share this page
https://cve.threatint.com/CVE/CVE-2024-45123

Support options

Helpdesk Chat, Email, Knowledgebase
Telegram Chat
Subscribe to our newsletter to learn more about our work.