PrestaShop 1.5.5.0 < 1.7.6.5 Multiple Vulnerabilities

PrestaShop is prone to multiple vulnerabilities. Copyright C 2020 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free software; you can...

CVE-2020-5272 Reflected XSS on Search page of PrestaShop

In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is a reflected XSS on Search page with alias and search parameters. The problem is patched in 1.7.6.5...

CVE-2020-5272

CVE-2020-5272 is a reflected XSS vulnerability in PrestaShop active between versions 1.5.5.0 and 1.7.6.5, exploitable via the search page using alias and search parameters. The issue arises from insufficient input validation on the search page, enabling client-side script execution. A patch is av...