Lucene search
K

26 matches found

Vulnrichment
Vulnrichment
added 2023/04/25 6:22 p.m.11 views

CVE-2023-30838 PrestaShop vulnerable to possible XSS injection through Validate::isCleanHTML method

PrestaShop is an Open Source e-commerce web application. Prior to versions 8.0.4 and 1.7.8.9, the ValidateCore::isCleanHTML method of Prestashop misses hijackable events which can lead to cross-site scripting XSS injection, allowed by the presence of pre-setup @keyframes methods. This XSS, which...

8.5CVSS5.2AI score0.01375EPSS
Exploits2References3
Cvelist
Cvelist
added 2023/04/25 6:22 p.m.12 views

CVE-2023-30838 PrestaShop vulnerable to possible XSS injection through Validate::isCleanHTML method

PrestaShop is an Open Source e-commerce web application. Prior to versions 8.0.4 and 1.7.8.9, the ValidateCore::isCleanHTML method of Prestashop misses hijackable events which can lead to cross-site scripting XSS injection, allowed by the presence of pre-setup @keyframes methods. This XSS, which...

8.5CVSS8.7AI score0.01375EPSS
Exploits2References3
Positive Technologies
Positive Technologies
added 2023/04/25 12:0 a.m.3 views

PT-2023-22993 · Unknown · Prestashop

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 8.0.4 and 1.7.8.9 Description: The issue concerns the ValidateCore::isCleanHTML method of PrestaShop, which misses hijackable events, leading to cross-site scripting XSS injection. This is allowed by the presence ...

9.9CVSS8.6AI score0.01375EPSS
Exploits2References13
0day.today
0day.today
added 2012/11/02 12:0 a.m.34 views

PrestaShop <= 1.5.1 Persistent XSS Vulnerability

Exploit for php platform in category web applications PrestaShop or embed src='data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc 3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9y Zy8xOTk5L3hsaW5rIiB2ZXJza...

7.1AI score
Exploits0
securityvulns
securityvulns
added 2012/11/02 12:0 a.m.80 views

PrestaShop &lt;= 1.5.1 Persistent XSS

PrestaShop = 1.5.1 Persistent XSS Tested under: Firefox, Chrome and Safari latest versions Discover Credits: David Sopas - [email protected] | @dsopas | davidsopas.com/labs Original link: http://davidsopas.com/labs/prestashopxss.txt Description: PrestaShop is the most reliable and flexible...

6.3AI score
Exploits0
Packet Storm
Packet Storm
added 2012/11/01 12:0 a.m.45 views

PrestaShop 1.5.1 Cross Site Scripting

PrestaShop or embed src='data:image/svg+xml;base64,PHN2ZyB4bWxuczpzdmc9Imh0dHA6Ly93d3cudzMub3JnLzIwMDAvc 3ZnIiB4bWxucz0iaHR0cDovL3d3dy53My5vcmcvMjAwMC9zdmciIHhtbG5zOnhsaW5rPSJodHRwOi8vd3d3LnczLm9y Zy8xOTk5L3hsaW5rIiB2ZXJzaW9uPSIxLjAiIHg9IjAi...

Exploits0
Rows per page
Query Builder