prestashop/ps_emailsubscription

Packagist1 known CVE affecting this package

Aggregated from OSV, GitHub Security Advisories, NVD, and vendor advisories. Each CVE links to its full detail page with vendor advisories, patches, fixed versions, and remediation guidance.

CVEs affecting prestashop/ps_emailsubscriptionpage 1 of 1

CVE-2021-21418MEDIUMCVSS 4.6EG 4.6✓ Fixed in 2.6.1
2021-03-31
vulnerable: v1.0.1 ... v2.6.0 (10 versions)
ps_emailsubscription is a newsletter subscription module for the PrestaShop platform. An employee can inject javascript in the newsletter condition field that will then be executed on the front office The issue has been fixed in 2.6.1

Check whether prestashop/ps_emailsubscription is used in your infrastructure

EchelonGraph scans your cloud and SBOMs to map every package to your actual deployments. See blast radius for prestashop/ps_emailsubscription CVEs against the assets you own.

Start Free Scan →