CVE-2020-15178
Potential XSS injection In PrestaShop contactform
Résumé
Potential XSS injection In PrestaShop contactform
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Impact
An attacker is able to inject javascript while using the contact form.
Patches
The problem is fixed in v4.3.0
References
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
prestashop/contactform
[{"type":"ECOSYSTEM","events":[{"introduced":"1.0.1"},{"fixed":"4.3.0"}]}]
Références
- advisory nvd.nist.gov
- package github.com
- web github.com
- web github.com
- web github.com
- web packagist.org