4 matches found
PT-2026-57368
Name of the Vulnerable Software and Affected Versions ps facetedsearch versions 3.0.0 through 4.0.3 Description A PHP Object Injection issue exists in the ps facetedsearch module. The module rebuilds search filters from the request URL, but the values for slider filters, specifically price or...
PrestaShop ps_facetedsearch cross-site scripting vulnerability
PrestaShop is a set of open source e-commerce solutions from PrestaShop, USA. The solution provides a variety of payment methods, short message alerts and product image zoom and other features. psfacetedsearch is one of the add layered navigation filter module. A cross-site scripting vulnerabilit...
CVE-2020-5294
PrestaShop module psfacetedsearch versions before 2.1.0 has a reflected XSS with social networks fields The problem is fixed in 2.1.0...
CVE-2020-5277
PrestaShop module psfacetedsearch versions before 3.5.0 has a reflected XSS with urlname parameter. The problem is fixed in 3.5.0...