Cross-site Scripting (XSS)

pimcore/pimcore is vulnerable to cross-site scripting XSS attacks. An attacker is able to bypass the validations due to improper input neutralization during web page generation. The vulnerability can be exploited via changing the rule name in the admin dev page allowing attackers to inject and...

Improper access control

In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for legacy controllers. - admin-dev/index.php/configure/shop/customer-preferences/ - admin-dev/index.php/improve/international/translations/ -...

CVE-2020-5279

PrestaShop vulnerability CVE-2020-5279 affects versions 1.5.0.0 through 1.7.6.5, due to improper access control in legacy controllers exposed via several admin paths (for example admin-dev/index.php/configure/shop/customer-preferences/ and related international/translation/geolocation/localizatio...