CVE-2012-20001

PrestaShop before 1.5.2 allows XSS via the "...

CVE-2012-20001

CVE-2012-20001 affects PrestaShop prior to 1.5.2.0. The vulnerability is an XSS in which an attacker can inject HTML/JS via the string "<object data='data:text/html" contained in the message field. The root cause is insufficient sanitization of the message content, enabling script execution in...