CVE-2024-45127
CVSS 3.1 Score 4.8 of 10 (medium)
Details
Published Oct 10, 2024
Updated: Oct 11, 2024
CWE ID 79
Summary
CVE-2024-45127 is a stored Cross-Site Scripting (XSS) vulnerability affecting Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, 2.4.4-p10, and earlier. This issue allows an admin attacker to inject malicious scripts into vulnerable form fields. Once executed, these scripts can potentially harm users by stealing sensitive information or taking control of their browsers when they visit affected pages.
Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.
Affected Products
- Adobe Commerce
Affected Vendors
- Adobe