4 matches found
CVE-2024-53771
Improper Neutralization of Input During Web Page Generation 'Cross-site Scripting' vulnerability in sergiomico SimpleSchema simpleschema-free allows DOM-Based XSS.This issue affects SimpleSchema: from n/a through = 1.7.6.9...
WordPress SimpleSchema plugin <= 1.7.6.9 - Cross Site Scripting (XSS) vulnerability
Cross Site Scripting XSS vulnerability discovered by SOPROBRO Patchstack Alliance in WordPress Plugin SimpleSchema versions = 1.7.6.9...
PrestaShop Access Control Error Vulnerability (CNVD-2020-64754)
PrestaShop is an open source e-commerce solution from PrestaShop, Inc. in the United States. The solution provides a variety of payment methods, short message alerts and product image scaling and other features. A security vulnerability exists in PrestaShop versions prior to 1.7.6.9, which can be...
Design/Logic Flaw
In PrestaShop before version 1.7.6.9 an attacker is able to list all the orders placed on the website without being logged by abusing the function that allows a shopping cart to be recreated from an order already placed. The problem is fixed in 1.7.6.9...