VYPR
← All advisories
High severity8.3NVD Advisory· Published Aug 7, 2023· Updated Jun 17, 2026

CVE-2023-39527

CVE-2023-39527

Description

PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to cross-site scripting through the isCleanHTML method. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
prestashop/prestashopPackagist
>= 8.1.0, < 8.1.18.1.1
prestashop/prestashopPackagist
>= 8.0.0, < 8.0.58.0.5
prestashop/prestashopPackagist
< 1.7.8.101.7.8.10

Affected products

5
  • Prestashop/Prestashop3 versions
    cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*range: <1.7.8.10
    • cpe:2.3:a:prestashop:prestashop:8.1.0:*:*:*:*:*:*:*
    • (no CPE)range: < 1.7.8.10
  • osv-coords2 versions
    pkg:bitnami/prestashoppkg:composer/prestashop/prestashop
    >= 8.0.0, < 8.0.5+ 1 more
    • (no CPE)range: >= 8.0.0, < 8.0.5
    • (no CPE)range: >= 8.1.0, < 8.1.1

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.