GHSA-9RCC-PMJ8-FFHR Semantic MediaWiki's Special:FacetedSearch cstate hidden inputs enable reflected XSS (residual of CVE-2025-10354)

Summary Special:FacetedSearch cstate hidden inputs enable reflected XSS residual of CVE-2025-10354 Details Affected versions and vulnerable location - Confirmed present on latest shipped release tag available in the local clone: SemanticMediaWiki/[email protected]. - Confirmed present on...

Semantic MediaWiki's Special:FacetedSearch cstate hidden inputs enable reflected XSS (residual of CVE-2025-10354)

Summary Special:FacetedSearch cstate hidden inputs enable reflected XSS residual of CVE-2025-10354 Details Affected versions and vulnerable location - Confirmed present on latest shipped release tag available in the local clone: SemanticMediaWiki/[email protected]. - Confirmed present on...

GHSA-M5F5-28QR-9G9R prestashop/ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE

Impact A PHP Object Injection vulnerability affects the PrestaShop module psfacetedsearch. The module rebuilds the selected search filters from the request URL. The value of a slider filter price or weight is taken from the URL without sufficient validation, then stored in an internal filter-bloc...

PT-2026-57368

Name of the Vulnerable Software and Affected Versions ps facetedsearch versions 3.0.0 through 4.0.3 Description An unauthenticated PHP Object Injection flaw exists in the ps facetedsearch module. The module rebuilds search filters from the request URL, where values for slider filters, specificall...

PT-2026-57361

Impact A PHP Object Injection vulnerability affects the PrestaShop module ps facetedsearch. The module rebuilds the selected search filters from the request URL. The value of a slider filter price or weight is taken from the URL without sufficient validation, then stored in an internal filter-blo...

PrestaShop ps_facetedsearch cross-site scripting vulnerability

PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The solution provides a variety of payment methods, short message alerts and product image zoom and other features. psfacetedsearch is one of the add layered navigation filter module. A cross-site scripting vulnerabilit...

CVE-2020-5294

PrestaShop module psfacetedsearch versions before 2.1.0 has a reflected XSS with social networks fields The problem is fixed in 2.1.0...

PT-2020-18383

Name of the Vulnerable Software and Affected Versions PrestaShop module ps facetedsearch versions prior to 2.1.0 Description The issue concerns a reflected XSS related to social networks fields. The problem has been fixed in version 2.1.0. Recommendations For PrestaShop module ps facetedsearch...

CVE-2020-5277

PrestaShop module psfacetedsearch versions before 3.5.0 has a reflected XSS with urlname parameter. The problem is fixed in 3.5.0...

PT-2020-18367

Name of the Vulnerable Software and Affected Versions PrestaShop module ps facetedsearch versions prior to 3.5.0 Description The issue is related to a reflected XSS with the url name parameter. The problem is fixed in version 3.5.0. Recommendations For PrestaShop module ps facetedsearch versions...