CVE-2013-4791: Improper Neutralization of Input During Web Page Generation

PrestaShop before 1.4.11 allows Logistician, translators and other low level profiles/accounts to inject a persistent XSS vector on TinyMCE...