Lucene search
K

4 matches found

OSV
OSV
β€’added 2021/03/31 6:15 p.m.β€’17 views

CVE-2021-21418

psemailsubscription is a newsletter subscription module for the PrestaShop platform. An employee can inject javascript in the newsletter condition field that will then be executed on the front office The issue has been fixed in 2.6.1...

5.4CVSS6.8AI score
Exploits0References4
CVE
CVE
β€’added 2021/03/31 5:35 p.m.β€’61 views

CVE-2021-21418

CVE-2021-21418 concerns the PrestaShop module ps_emailsubscription . A cross‑site scripting (XSS) vulnerability exists where an employee can inject JavaScript into the newsletter condition field, which is then executed on the front office. The issue has been fixed in module version 2.6.1 .

5.4CVSS4.9AI score0.00264EPSS
Exploits0References4Affected Software1
Cvelist
Cvelist
β€’added 2021/03/31 5:35 p.m.β€’12 views

CVE-2021-21418 Potential XSS injection in the newsletter conditions field

psemailsubscription is a newsletter subscription module for the PrestaShop platform. An employee can inject javascript in the newsletter condition field that will then be executed on the front office The issue has been fixed in 2.6.1...

4.6CVSS5.7AI score0.00264EPSS
Exploits0References4
CNNVD
CNNVD
β€’added 2021/03/31 12:0 a.m.β€’2 views

Progi1984 ps_emailsubscription θ·¨η«™θ„šζœ¬ζΌζ΄ž

Progi1984 psemailsubscription is Progi1984 an open source application. Provides an e-mail form. A security vulnerability exists in psemailsubscription that stems from the ability to inject javascript into the newsletter conditional field...

5.4CVSS5.7AI score0.00264EPSS
Exploits0References5
Rows per page
Query Builder