CVE-2020-5277

2020-03-2519:15:15

Google

osv.dev

5.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

19.4%

JSON

PrestaShop module ps_facetedsearch versions before 3.5.0 has a reflected XSS with url_name parameter. The problem is fixed in 3.5.0

CPENameOperatorVersion
ps_facetedsearcheq3.1.0
ps_facetedsearcheq3.0.4
ps_facetedsearcheq3.3.0
ps_facetedsearcheq3.0.7
ps_facetedsearcheq3.0.0
ps_facetedsearchequntagged-45df9cf520cc07d9bd44
ps_facetedsearcheq3.0.2
ps_facetedsearcheq2.1.1
ps_facetedsearcheq2.2.0
ps_facetedsearcheq2.1.2

Name	Operator	Version
ps_facetedsearch	eq	3.1.0
ps_facetedsearch	eq	3.0.4
ps_facetedsearch	eq	3.3.0
ps_facetedsearch	eq	3.0.7
ps_facetedsearch	eq	3.0.0
ps_facetedsearch	eq	untagged-45df9cf520cc07d9bd44
ps_facetedsearch	eq	3.0.2
ps_facetedsearch	eq	2.1.1
ps_facetedsearch	eq	2.2.0
ps_facetedsearch	eq	2.1.2