Medium severity6.1NVD Advisory· Published Nov 28, 2023· Updated Jun 17, 2026

CVE-2023-48042

Description

Cross Site Scripting (XSS) in Search filters in Prestashop Amazzing filter version up to version 3.2.5, allows remote attackers to inject arbitrary JavaScript code.

Affected products

Communitydeveloper/Amazzing Filter
cpe:2.3:a:communitydeveloper:amazzing_filter:*:*:*:*:*:prestashop:*:*
Range: <=3.2.5
Prestashop/Amazzing filterdescription
Prestashop/Amazzing filterllm-fuzzy
Range: <=3.2.5

Patches

Vulnerability mechanics

References

medium.com/%40nasir.synack/uncovering-a-cross-site-scripting-vulnerability-cve-2023-48042-in-amazzing-filters-prestashop-2e4a9f8b655envdThird Party Advisory
addons.prestashop.com/en/search-filters/18575-amazzing-filter.htmlnvdProduct

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000