← Database

CVE-2024-56173

MEDIUM CVSS: 4.7 Published: 2024-12-18 Modified: 2026-06-17

Description

In Optimizely Configured Commerce before 5.2.2408, malicious payloads can be stored and subsequently executed in users' browsers under specific conditions: XSS from JavaScript in an SVG document.

Affected Platforms

Optimizely Configured Commerce

Weakness Type

CWE-79

References