PT-2019-10176

Name of the Vulnerable Software and Affected Versions: PrestaShop versions prior to 1.7.2.5 Description: The issue allows an attack in the orders section of PrestaShop after gaining access with a user role of at least a Salesman or higher privileges. The attacker can inject arbitrary PHP objects...

PT-2017-14032

Name of the Vulnerable Software and Affected Versions Shopware versions 5.2.5 through 5.3 Description The issue allows remote attackers to inject malicious script code into the firstname, lastname, or order input fields, leading to persistent execution in the customer and orders section of the...