Описание
Reflected XSS with parameters in PostComment
Impact
An attacker could inject malicious web code into the users' web browsers by creating a malicious link.
Patches
The problem is fixed in 4.2.0
References
Пакеты
Наименование
prestashop/productcomments
composer
Затронутые версииВерсия исправления
>= 4.0.0, < 4.2.0
4.2.0
Связанные уязвимости
CVSS3: 8.7
nvd
около 5 лет назад
In PrestaShop Product Comments before version 4.2.0, an attacker could inject malicious web code into the users' web browsers by creating a malicious link. The problem was introduced in version 4.0.0 and is fixed in 4.2.0