Unrated severityNVD Advisory· Published Feb 27, 2024· Updated Nov 20, 2024

CVE-2024-25841

Description

In the module "So Flexibilite" (soflexibilite) from Common-Services for PrestaShop < 4.1.26, a guest (authenticated customer) can perform Cross Site Scripting (XSS) injection.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Common-Services for PrestaShop/So Flexibilitedescription
Prestashop/So Flexibilitellm-fuzzy
Range: <4.1.26

Patches

Vulnerability mechanics

References

addons.prestashop.com/fr/transporteurs/2704-colissimo-domicile-et-points-de-retrait.htmlmitre
security.friendsofpresta.org/modules/2024/02/27/soflexibilite.htmlmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000