Cross Site Scripting (XSS)

2022-07-1417:40:58

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

0.001 Low

EPSS

Percentile

43.0%

Prestashop is vulnerable to cross site scripting. The product catalog feature allows for an admin to upload arbitrary .html files with `

CPENameOperatorVersion
prestashop/prestashople1.7.8.6
prestashop/prestashople1.7.8.6

CPE	Name	Operator	Version
	prestashop/prestashop	le	1.7.8.6
	prestashop/prestashop	le	1.7.8.6

References

packetstormsecurity.com/files/167742/PrestaShop-1.7.6.7-Cross-Site-Scripting.html

github.com/PrestaShop/PrestaShop/issues/20306

0.001 Low

EPSS

Percentile

43.0%

Related for VERACODE:36360