PT-2020-12534 · Prestashop · Prestashop
CVSS v3.1
5.4
Medium
| Vector | AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N |
Name of the Vulnerable Software and Affected Versions
PrestaShop versions 1.5.3.0 through 1.7.6.6
PrestaShop versions 1.5.3.0 through 1.7.7.6
Description
The issue is related to a stored XSS when using the name of a quick access item.
Recommendations
For PrestaShop versions 1.5.3.0 through 1.7.6.6, update to version 1.7.6.6 to resolve the issue.
For PrestaShop versions 1.5.3.0 through 1.7.7.6, update to version 1.7.7.6 to resolve the issue.
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Prestashop