Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:40732
HistoryMay 30, 2023 - 12:25 p.m.

Cross-Site Scripting (XSS)

2023-05-3012:25:55
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
cross-site scripting
xss
javascript
browser
vulnerability
contact form
prestashop

prestashop/prestashop is vulnerable to Cross-Site Scripting (XSS). The vulnerability is due to a lack of sanitization in contactform.php which allows an attacker to inject and execute arbitrary JavaScript into the browser.

Related for VERACODE:40732