Lucene search
GoogleOSV:CVE-2020-15178HistorySep 15, 2020 - 6:15 p.m.
CVE-2020-15178
2020-09-1518:15:13
Google
osv.dev
3
prestashop
contactform
vulnerability
javascript
injection
security
In PrestaShop contactform module (prestashop/contactform) before version 4.3.0, an attacker is able to inject JavaScript while using the contact form. The message field was incorrectly unescaped, possibly allowing attackers to execute arbitrary JavaScript in a victim’s browser.
Related
osv
osv
Potential XSS injection In PrestaShop contactform
2020-09-15 17:34:17
github
github
Potential XSS injection In PrestaShop contactform
2020-09-15 17:34:17
cvelist
cvelist
CVE-2020-15178 Potential XSS in PrestaShop contactform
2020-09-15 17:50:13
veracode
veracode
Cross-Site Scripting (XSS)
2020-09-16 05:17:42
nvd
nvd
CVE-2020-15178
2020-09-15 18:15:13
CVE-2023-31508
2023-05-11 22:15:11
cve
cve
CVE-2020-15178
2020-09-15 18:15:13
CVE-2023-31508
2023-05-11 22:15:11
prion
prion
Input validation
2020-09-15 18:15:00