cve/2022/CVE-2022-35698.md

CVE-2022-35698

Description

Adobe Commerce versions 2.4.4-p1 (and earlier) and 2.4.5 (and earlier) are affected by a Stored Cross-site Scripting vulnerability. Exploitation of this issue does not require user interaction and could result in a post-authentication arbitrary code execution.

POC

Reference

No PoCs from references.

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/EmicoEcommerce/Magento-APSB22-48-Security-Patches
• https://github.com/TuVanDev/TuVanDev
• https://github.com/Viper9x/Viper9x
• https://github.com/aneasystone/github-trending
• https://github.com/k0mi-tg/CVE-POC
• https://github.com/karimhabush/cyberowl
• https://github.com/manas3c/CVE-POC
• https://github.com/nomi-sec/PoC-in-GitHub
• https://github.com/whoforget/CVE-POC
• https://github.com/youwizard/CVE-POC