Unrated severityNVD Advisory· Published Jul 2, 2020· Updated Aug 4, 2024
Stored XSS in PrestaShop
CVE-2020-11074
Description
In PrestaShop from version 1.5.3.0 and before version 1.7.6.6, there is a stored XSS when using the name of a quick access item. The problem is fixed in 1.7.6.6.
Affected products
1- Range: >= 1.5.3.0, < 1.7.6.6
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- github.com/PrestaShop/PrestaShop/commit/d122b82bcc2ad8a7b05cfffc03df6c2cae08efe8mitrex_refsource_MISC
- github.com/PrestaShop/PrestaShop/security/advisories/GHSA-v4pg-q2cv-f7x4mitrex_refsource_CONFIRM
News mentions
0No linked articles in our index yet.