Lucene search
+L

1 matches found

Cvelist
Cvelist
added 2025/01/22 2:26 p.m.21 views

CVE-2025-24027 ps_contactinfo has potential XSS due to usage of the nofilter tag in template

pscontactinfo, a PrestaShop module for displaying store contact information, has a cross-site scripting XSS vulnerability in versions up to and including 3.3.2. This can not be exploited in a fresh install of PrestaShop, only shops made vulnerable by third party modules are concerned. For example...

6.2CVSS0.00403EPSS
SaveExploits0References2
Rows per page
Query Builder