Описание
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in search history.
Уязвимые конфигурации
Конфигурация 1Версия до 5.2.2408 (исключая)
cpe:2.3:a:optimizely:configured_commerce:*:*:*:*:*:*:*:*
EPSS
Процентиль: 38%
0.00162
Низкий
8.1 High
CVSS3
Дефекты
CWE-79
Связанные уязвимости
CVSS3: 8.1
github
8 месяцев назад
In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in search history.
EPSS
Процентиль: 38%
0.00162
Низкий
8.1 High
CVSS3
Дефекты
CWE-79