PT-2022-22870 · Amasty · Amasty Blog

Published 2022-11-23 · Updated 2025-04-28 · CVE-2022-35500

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Amasty Blog version 2.10.3

Description The issue is related to Cross Site Scripting (XSS) via the leave comment functionality. This means an attacker could potentially inject malicious scripts into the website, affecting user sessions.

Recommendations For Amasty Blog version 2.10.3, consider disabling the leave comment functionality until a patch is available to prevent potential XSS attacks.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-35500

Affected Products

Amasty Blog

References · 7

• 🔥 https://github.com/afine-com/CVE-2022-35500 · Exploit
• https://osv.dev/vulnerability/CVE-2022-35500 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-35500 · Security Note
• http://amasty.com · Note
• https://t.me/cvenotify/38284 · Telegram Post
• https://t.me/cvenotify/120093 · Telegram Post
• https://t.me/cibsecurity/53403 · Telegram Post