PrestaShop 1.7.6.1 < 1.7.6.5 Multiple XSS Vulnerabilities

PrestaShop is prone to multiple cross-site scripting XSS vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is fr...

CVE-2020-5269 Reflected XSS on AdminFeatures page of PrestaShop

In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminFeatures page by using the idfeature parameter. The problem is fixed in 1.7.6.5...

CVE-2020-5269

Summary: CVE-2020-5269 affects PrestaShop versions 1.7.6.1–1.7.6.5 with a reflected XSS on the AdminFeatures page via the id_feature parameter. The issue is fixed in 1.7.6.5. The connected sources confirm a reflected XSS vulnerability and a fixed version; exploitation status is not provided in th...