CVE-2022-35500

38th percentile - higher than 38% of all known CVEs

Amasty Blog version 2.10.3 is vulnerable to Cross-Site Scripting (XSS) via the leave comment functionality. This allows an attacker to inject malicious JavaScript code into the page.

The risk includes potential session hijacking, redirection to malicious sites, or theft of sensitive data through script execution in the victim's browser.

Immediately update the Amasty Blog plugin to the latest available version that fixes this vulnerability. Additionally, implement input validation and sanitization in the comment functionality.