CVE-2020-26225
Reflected XSS with parameters in PostComment
Résumé
Reflected XSS with parameters in PostComment
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Impact
An attacker could inject malicious web code into the users' web browsers by creating a malicious link.
Patches
The problem is fixed in 4.2.0
References
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Paquets affectés
Packagist
prestashop/productcomments
[{"type":"ECOSYSTEM","events":[{"introduced":"4.0.0"},{"fixed":"4.2.0"}]}]
Références
- advisory nvd.nist.gov
- web github.com
- web github.com