Cross-site Scripting (XSS)

2021-04-0103:43:07

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

cross-site scripting

prestashop

email subscription

configuration

vulnerability

unsantized values

EPSS

0.001

Percentile

31.7%

JSON

prestashop/ps_emailsubscription is vulnerable to cross-site scripting (XSS). The vulnerability exists through the unsanitized values of NW_CONDITIONS configuration in ps_emailsubscription.php.

References

github.com/PrestaShop/ps_emailsubscription/commit/664ffb225e2afb4a32640bbedad667dc6e660b70

github.com/PrestaShop/ps_emailsubscription/releases/tag/v2.6.1

github.com/PrestaShop/ps_emailsubscription/security/advisories/GHSA-vwfx-hh3w-fj99

packagist.org/packages/prestashop/ps_emailsubscription

EPSS

0.001

Percentile

31.7%

JSON

Related for VERACODE:29879