Mikakulmala

**Name of the Vulnerable Software and Affected Versions** PrestaShop versions 1.6.0.4 through 1.7.6.7 **Description** The issue allows an attacker to inject javascript when using the contact form. The problem is fixed in version 1.7.6.8. **Recommendations** For PrestaShop versions 1.6.0.4 through 1.7.6.7, update to version 1.7.6.8 to resolve the issue.