GHSA-6grv-hw8g-4gfmMediumCVSS 6.1

PrestaShop Cross-site Scripting vulnerability

Published
May 24, 2022
Last Modified
April 23, 2024

🔗 CVE IDs covered (1)

CVE-2019-11876 →

📋 Description

In PrestaShop 1.7.5.2, the shop_country parameter in the install/index.php installation script/component is affected by Reflected XSS. Exploitation by a malicious actor requires the user to follow the initial stages of the setup (accepting terms and conditions) before executing the malicious link.

🎯 Affected products1

  • composer/prestashop/prestashop:= 1.7.5.2

🔗 References (4)