Cross-site Scripting (XSS)

prestashop/prestashop is vulnerable to Cross-site Scripting XSS. The vulnerability is caused by a lack of proper sanitization for HTML content in the message property of the CustomerMessageCore class. This allows an attacker to inject HTML into the message field resulting in the unsanitized HTML...