What is GHSA-crpg-2mm2-jjqf?

GHSA-crpg-2mm2-jjqf is a security advisory published by GitHub Security Advisories with Medium severity. PrestaShop Stored Cross-Site Scripting Vulnerability

Which CVE IDs does GHSA-crpg-2mm2-jjqf cover?

GHSA-crpg-2mm2-jjqf covers the following CVE IDs: CVE-2013-4791. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-crpg-2mm2-jjqf?

GHSA-crpg-2mm2-jjqf has a CVSS v3 base score of 5.4, published by GitHub Security Advisories.

Which products are affected by GHSA-crpg-2mm2-jjqf?

GHSA-crpg-2mm2-jjqf affects 1 product, including: composer/prestashop/prestashop:\u003c 1.4.11.

GHSA-crpg-2mm2-jjqfMediumCVSS 5.4

PrestaShop Stored Cross-Site Scripting Vulnerability

Vendor

GitHub Security Advisories

Published

May 5, 2022

Last Modified

August 28, 2023

🔗 CVE IDs covered (1)

CVE-2013-4791 →

📋 Description

PrestaShop before 1.4.11 allows Logistician, translators and other low level profiles/accounts to inject a persistent XSS vector on TinyMCE.

🎯 Affected products1

composer/prestashop/prestashop:< 1.4.11

🔗 References (3)

https://nvd.nist.gov/vuln/detail/CVE-2013-4791
http://davidsopaslabs.blogspot.com/2013/07/prestashop-persistent-xss-and-csrf.html
https://github.com/advisories/GHSA-crpg-2mm2-jjqf