Lucene search
+L

7 matches found

OSV
OSV
added 2024/01/03 9:41 p.m.28 views

GHSA-XGPM-Q3MQ-46RQ PrestaShop some attribute not escaped in Validate::isCleanHTML method

Description Some event attributes are not detected by the isCleanHTML method Impact Some modules using the isCleanHTML method could be vulnerable to xss Patches 8.1.3, 1.7.8.11 Workarounds The best workaround is to use the HTMLPurifier library to sanitize html input coming from users. The library...

8.1CVSS6.8AI score0.00523EPSS
SaveExploits0References7
Rows per page
Query Builder