Skip to content
CVE PROGRAM SOURCE RECORD10.0 Critical

CVE-2022-35698

Adobe Commerce Stored XSS Arbitrary code execution

Description

Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Adobe Magento Commerce

  • unspecified to ≤ 2.4.5affected
  • unspecified to ≤ 2.4.4-p1affected
  • unspecified to ≤ Noneaffected

References