Adobe Commerce Impacted by XSS Vulnerability Requiring User Interaction

CVE-2024-45116

Summary

Adobe Commerce versions 2.4.7-p2, 2.4.6-p7, 2.4.5-p9, and earlier exhibit a Cross-Site Scripting vulnerability that allows attackers to execute arbitrary code. This vulnerability can be exploited if an administrator tricks a legitimate user into clicking a specially crafted link or submitting a malicious form. The exploitation relies on user interaction, which can result in unauthorized script execution within the user's browser, significantly compromising the confidentiality and integrity of the system. Organizations using affected versions should prioritize the implementation of available security updates to mitigate the potential risks associated.

References