Cross-Site Scripting (XSS)

2020-04-1707:05:27

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

19.6%

JSON

prestashop/ps_linklist is vulnerable to cross-site scripting (XSS). The attack can inject arbitrary script when creating or editing a link list block with the title field in the ps_link module for PrestaShop.

CPENameOperatorVersion
prestashop/ps_linklistle3.0.4

CPE	Name	Operator	Version
	prestashop/ps_linklist	le	3.0.4

References

github.com/PrestaShop/ps_linklist/commit/b90005c2cfed949ab564228b277a728e0a62a876

github.com/PrestaShop/ps_linklist/security/advisories/GHSA-vr7g-vqp5-966j

0.001 Low

EPSS

Percentile

19.6%

JSON

Related for VERACODE:25048