CVE-2020-5264

2020-04-2017:15:15

Google

osv.dev

6.6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.3%

JSON

In PrestaShop before version 1.7.6.5, there is a reflected XSS while running the security compromised page. It allows anyone to execute arbitrary action. The problem is patched in the 1.7.6.5.

CPENameOperatorVersion
prestashopeq1.6.0.6
prestashopeq1.6.0.4
prestashopeq1.7.2.4
prestashopeq1.6.0.9
prestashopeq1.5.3.0
prestashopeq1.7.0.0-beta.4.0
prestashopeq1.7.2.1
prestashopeq1.5.6.1
prestashopeq1.7.2.0
prestashopeq1.7.2.2

Name	Operator	Version
prestashop	eq	1.6.0.6
prestashop	eq	1.6.0.4
prestashop	eq	1.7.2.4
prestashop	eq	1.6.0.9
prestashop	eq	1.5.3.0
prestashop	eq	1.7.0.0-beta.4.0
prestashop	eq	1.7.2.1
prestashop	eq	1.5.6.1
prestashop	eq	1.7.2.0
prestashop	eq	1.7.2.2