CVE-2020-15178
Potential XSS injection In PrestaShop contactform
Summary
Potential XSS injection In PrestaShop contactform
Original description
The description as published by the source.
Impact
An attacker is able to inject javascript while using the contact form.
Patches
The problem is fixed in v4.3.0
References
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Packagist
prestashop/contactform
[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.1"},{"fixed":"4.3.0"}]}]
References
- advisory nvd.nist.gov
- package github.com
- web github.com
- web github.com
- web github.com
- web packagist.org