CVE-2022-36432

MEDIUM 5.4CVE-2022-36432 · Published 17/11/2022 · updated 17/06/2026

In short

CVE-2022-36432 is a MEDIUM (CVSS 5.4) vulnerability affecting blog pro (amasty).
Chance of exploitation in the next 30 days (EPSS): 0.58%, higher than 48.1% of all vulnerabilities.
Fix: update to 2.10.5 or later.

Package	Affected versions	Patched versions
blog pro amasty	`< 2.10.5`	`2.10.5`

Description

The Preview functionality in the Amasty Blog Pro 2.10.3 plugin for Magento 2 uses eval unsafely. This allows attackers to perform Cross-site Scripting attacks on admin panel users by manipulating the generated preview application response.

References

afine-com/CVE-2022-36432 · Exploit

More vulnerabilities in blog pro

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free