CVE-2020-5272

2020-04-2017:15:15

Google

osv.dev

6 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

29.3%

JSON

In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is a reflected XSS on Search page with alias and search parameters. The problem is patched in 1.7.6.5

CPENameOperatorVersion
prestashopeq1.6.0.6
prestashopeq1.6.0.4
prestashopeq1.7.2.4
prestashopeq1.6.0.9
prestashopeq1.5.3.0
prestashopeq1.7.0.0-beta.4.0
prestashopeq1.7.2.1
prestashopeq1.5.6.1
prestashopeq1.7.2.0
prestashopeq1.7.2.2

Name	Operator	Version
prestashop	eq	1.6.0.6
prestashop	eq	1.6.0.4
prestashop	eq	1.7.2.4
prestashop	eq	1.6.0.9
prestashop	eq	1.5.3.0
prestashop	eq	1.7.0.0-beta.4.0
prestashop	eq	1.7.2.1
prestashop	eq	1.5.6.1
prestashop	eq	1.7.2.0
prestashop	eq	1.7.2.2