CVE-2015-1175: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in blocklayered-ajax.php in the blocklayered module in PrestaShop 1.6.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the layeredpriceslider parameter...

PT-2015-5146

Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.6.0.9 and earlier Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via the layered price slider parameter in the blocklayered-ajax.php file of the...