CVE-2020-26225
Reflected XSS with parameters in PostComment
Summary
Reflected XSS with parameters in PostComment
Original description
The description as published by the source.
Impact
An attacker could inject malicious web code into the users' web browsers by creating a malicious link.
Patches
The problem is fixed in 4.2.0
References
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Affected packages
Packagist
prestashop/productcomments
[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.2.0"}]}]
References
- advisory nvd.nist.gov
- web github.com
- web github.com