Lucene search
+L

2 matches found

OSV
OSV
added 2024/05/14 3:45 p.m.18 views

CVE-2024-34716 PrestaShop vulnerable to XSS via customer contact form in FO, through file upload

PrestaShop is an open source e-commerce web application. A cross-site scripting XSS vulnerability that only affects PrestaShops with customer-thread feature flag enabled is present starting from PrestaShop 8.1.0 and prior to PrestaShop 8.1.6. When the customer thread feature flag is enabled throu...

9.6CVSS7.4AI score0.5617EPSS
SaveExploits2References4
Rows per page
Query Builder