CVE-2020-5271

2020-04-2017:15:15

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.3%

JSON

In PrestaShop between versions 1.6.0.0 and 1.7.6.5, there is a reflected XSS with date_from and date_to parameters in the dashboard page This problem is fixed in 1.7.6.5

CPENameOperatorVersion
prestashopeq1.6.0.6
prestashopeq1.6.0.4
prestashopeq1.7.2.4
prestashopeq1.6.0.9
prestashopeq1.5.3.0
prestashopeq1.7.0.0-beta.4.0
prestashopeq1.7.2.1
prestashopeq1.5.6.1
prestashopeq1.7.2.0
prestashopeq1.7.2.2

Name	Operator	Version
prestashop	eq	1.6.0.6
prestashop	eq	1.6.0.4
prestashop	eq	1.7.2.4
prestashop	eq	1.6.0.9
prestashop	eq	1.5.3.0
prestashop	eq	1.7.0.0-beta.4.0
prestashop	eq	1.7.2.1
prestashop	eq	1.5.6.1
prestashop	eq	1.7.2.0
prestashop	eq	1.7.2.2