Security Advisory

CVE-2024-56175

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2024-12-18 00:00:00
Last updated 2024-12-18 15:09:37
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from client-side template injection in list item names.