CVE-2023-39676

2023-09-0800:00:00

mitre

www.cve.org

cross-site scripting

reflected vulnerability

prestashop module

callback parameter

EPSS

0.002

Percentile

57.1%

JSON

FieldPopupNewsletter Prestashop Module v1.0.0 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the callback parameter at ajax.php.

References

blog.sorcery.ie/posts/fieldpopupnewsletter_xss/

sorcery.ie

themeforest.net/user/fieldthemes

EPSS

0.002

Percentile

57.1%

JSON

Related for CVELIST:CVE-2023-39676