Prestashop Cross-Site Scripting Vulnerability (CNVD-2022-54894)

Prestashop is an open source e-commerce solution from Prestashop, Inc. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. Prestashop version 1.7.6.7 has a cross-site scripting vulnerability, which can be exploited by attackers to run arbitrary code by adding a new file page.