Lucene search
GoogleOSV:GHSA-58W4-W77W-QV3WHistoryNov 16, 2020 - 9:23 p.m.
Reflected XSS with parameters in PostComment
2020-11-1621:23:29
Google
osv.dev
9
0.001 Low
EPSS
Percentile
29.5%
Impact
An attacker could inject malicious web code into the users’ web browsers by creating a malicious link.
Patches
The problem is fixed in 4.2.0
References
| CPE | Name | Operator | Version |
|---|---|---|---|
| prestashop/productcomments | eq | 4.0.1 | |
| prestashop/productcomments | eq | 4.1.0 | |
| prestashop/productcomments | eq | 4.0.0 |
Related
osv
osv
CVE-2020-26225
2020-11-16 22:15:12
cve
cve
CVE-2020-26225
2020-11-16 22:15:12
cvelist
cvelist
CVE-2020-26225 Reflected XSS in PrestaShop Product Comments
2020-11-16 21:35:13
github
github
Reflected XSS with parameters in PostComment
2020-11-16 21:23:29
veracode
veracode
Cross-Site Scripting (XSS)
2020-11-17 05:16:58
Cross-site Scripting (XSS)
2020-11-18 05:30:21
prion
prion
Design/Logic Flaw
2020-11-16 22:15:00
nvd
nvd
CVE-2020-26225
2020-11-16 22:15:12