EUVD-2020-26488

Malware in sbrugna...

CVE-2020-5294

PrestaShop module psfacetedsearch versions before 2.1.0 has a reflected XSS with social networks fields The problem is fixed in 2.1.0...

CVE-2020-5277

PrestaShop module psfacetedsearch versions before 3.5.0 has a reflected XSS with urlname parameter. The problem is fixed in 3.5.0...

CVE-2020-5294

PrestaShop module psfacetedsearch versions before 2.1.0 has a reflected XSS with social networks fields The problem is fixed in 2.1.0...

Cross site scripting

PrestaShop module psfacetedsearch versions before 2.1.0 has a reflected XSS with social networks fields The problem is fixed in 2.1.0...

CVE-2020-5294

CVE-2020-5294 concerns the PrestaShop module ps_facetedsearch, where versions before 2.1.0 are vulnerable to a reflected Cross-Site Scripting (XSS) issue via the social networks fields. The core problem is an input validation weakness that allows injection and execution of arbitrary JavaScript in...

CVE-2020-5277

PrestaShop module psfacetedsearch versions before 3.5.0 has a reflected XSS with urlname parameter. The problem is fixed in 3.5.0...

Cross site scripting

PrestaShop module psfacetedsearch versions before 3.5.0 has a reflected XSS with urlname parameter. The problem is fixed in 3.5.0...

CVE-2020-5277 Reflected XSS with url_name parameter of PrestaShop module ps_facetedsearch

PrestaShop module psfacetedsearch versions before 3.5.0 has a reflected XSS with urlname parameter. The problem is fixed in 3.5.0...

CVE-2020-5277

CVE-2020-5277 affects the PrestaShop module ps_facetedsearch. The vulnerability is a reflected XSS in the url_name parameter for versions before 3.5.0; fixed in 3.5.0. Connected documents confirm the affected product/module and the fix version. Remediation: upgrade to ps_facetedsearch 3.5.0 or la...

PrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841

Impact We have identified that some psfacetedsearch module ZIP archives have been built with phpunit dev dependencies. PHPUnit contains a php script that would allow, on a webserver, an attacker to perform a RCE. This vulnerability impacts - phpunit before 4.8.28 and 5.x before 5.6.3 as reported ...

GHSA-F884-GM86-CG3Q PrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841

Impact We have identified that some psfacetedsearch module ZIP archives have been built with phpunit dev dependencies. PHPUnit contains a php script that would allow, on a webserver, an attacker to perform a RCE. This vulnerability impacts - phpunit before 4.8.28 and 5.x before 5.6.3 as reported ...