Описание
In the ps_link module for PrestaShop before version 3.1.0, there is a stored XSS when you create or edit a link list block with the title field. The problem is fixed in 3.1.0
Ссылки
- PatchThird Party Advisory
- Third Party Advisory
- PatchThird Party Advisory
- Third Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия от 1.0.4 (включая) до 3.1.0 (исключая)
cpe:2.3:a:prestashop:prestashop_link:*:*:*:*:*:prestashop:*:*
EPSS
Процентиль: 43%
0.00206
Низкий
4.4 Medium
CVSS3
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
CWE-79
EPSS
Процентиль: 43%
0.00206
Низкий
4.4 Medium
CVSS3
5.4 Medium
CVSS3
3.5 Low
CVSS2
Дефекты
CWE-79
CWE-79