Medium severity6.1NVD Advisory· Published Sep 2, 2022· Updated Jun 17, 2026
CVE-2022-35933
CVE-2022-35933
Description
This package is a PrestaShop module that allows users to post reviews and rate products. There is a vulnerability where the attacker could steal an administrator's cookie. The issue is fixed in version 5.0.2.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
prestashop/productcommentsPackagist | < 5.0.2 | 5.0.2 |
Affected products
3cpe:2.3:a:prestashop:productcomments:*:*:*:*:*:prestashop:*:*+ 1 more
- cpe:2.3:a:prestashop:productcomments:*:*:*:*:*:prestashop:*:*range: <5.0.2
- (no CPE)range: < 5.0.2
Patches
Vulnerability mechanics
References
4- github.com/PrestaShop/productcomments/commit/314456d739155aa71f0b235827e8e0f24b97c26bnvdPatchThird Party AdvisoryWEB
- github.com/PrestaShop/productcomments/security/advisories/GHSA-prrh-qvhf-x788nvdThird Party AdvisoryWEB
- github.com/advisories/GHSA-prrh-qvhf-x788ghsaADVISORY
- nvd.nist.gov/vuln/detail/CVE-2022-35933ghsaADVISORY
News mentions
0No linked articles in our index yet.