Cross-Site Scripting (XSS)

2020-09-1605:17:42

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

vulnerable

javascript injection

user browser

contact form

EPSS

0.002

Percentile

61.0%

JSON

prestashop/contactform is vulnerable to cross-site scripting (XSS). An attacker is able to inject and execute arbitrary Javascript in a user’s browser via the message field.

References

github.com/advisories/GHSA-95hx-62rh-gg96

github.com/PrestaShop/contactform/commit/ecd9f5d14920ec00885766a7cb41bcc5ed8bfa09

github.com/PrestaShop/contactform/security/advisories/GHSA-95hx-62rh-gg96

packagist.org/packages/prestashop/contactform

EPSS

0.002

Percentile

61.0%

JSON

Related for VERACODE:26756