← Back to browse · API

CVE-2022-35698

Severity
CRITICAL
CVSS
10.0
EPSS
0.10128
Risk score
43.54
CISA KEV
No
PoC
No
Published
2022-10-14
Modified
2025-04-23
First seen
2026-08-07
Aliases
EUVD-2022-38573, GHSA-4VJ2-426R-JM3G
Products
Adobe:Magento Commerce unspecified ≤2.4.4-p1, Adobe:Magento Commerce unspecified ≤2.4.5, Adobe:Magento Commerce unspecified ≤None
Sources
euvd EUVD-2022-38573

Description

Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.

References