What is GHSA-58w4-w77w-qv3w?

GHSA-58w4-w77w-qv3w is a security advisory published by GitHub Security Advisories with Medium severity. Reflected XSS with parameters in PostComment

Which CVE IDs does GHSA-58w4-w77w-qv3w cover?

GHSA-58w4-w77w-qv3w covers the following CVE IDs: CVE-2020-26225. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-58w4-w77w-qv3w?

GHSA-58w4-w77w-qv3w has a CVSS v3 base score of 8.7, published by GitHub Security Advisories.

Which products are affected by GHSA-58w4-w77w-qv3w?

GHSA-58w4-w77w-qv3w affects 1 product, including: composer/prestashop/productcomments:\u003e= 4.0.0, \u003c 4.2.0.

GHSA-58w4-w77w-qv3wMediumCVSS 8.7

Reflected XSS with parameters in PostComment

Vendor

GitHub Security Advisories

Published

November 16, 2020

Last Modified

January 9, 2023

🔗 CVE IDs covered (1)

CVE-2020-26225 →

📋 Description

Impact

An attacker could inject malicious web code into the users' web browsers by creating a malicious link.

Patches

The problem is fixed in 4.2.0

References

Cross-site Scripting (XSS) - Reflected (CWE-79)

🎯 Affected products1

composer/prestashop/productcomments:>= 4.0.0, < 4.2.0

🔗 References (4)

https://github.com/PrestaShop/productcomments/security/advisories/GHSA-58w4-w77w-qv3w
https://nvd.nist.gov/vuln/detail/CVE-2020-26225
https://github.com/PrestaShop/productcomments/commit/c56e3e9495c4a0a9c1e7dc43e1bb0fcad2796dbf
https://github.com/advisories/GHSA-58w4-w77w-qv3w