Cross site scripting

2023-11-2813:15:00

PRIOn knowledge base

www.prio-n.com

cross site scripting

search filters

prestashop

amazzing filter

remote attackers

javascript code

nvd

6.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

25.3%

JSON

Cross Site Scripting (XSS) in Search filters in Prestashop Amazzing filter version up to version 3.2.5, allows remote attackers to inject arbitrary JavaScript code.

CPENameOperatorVersion
amazzing_filterle3.2.5

CPE	Name	Operator	Version
	amazzing_filter	le	3.2.5

References

addons.prestashop.com/en/search-filters/18575-amazzing-filter.html

medium.com/%40nasir.synack/uncovering-a-cross-site-scripting-vulnerability-cve-2023-48042-in-amazzing-filters-prestashop-2e4a9f8b655e