What is GHSA-prrh-qvhf-x788?

GHSA-prrh-qvhf-x788 is a security advisory published by GitHub Security Advisories with Medium severity. PrestaShop Product Comments Cross-site Scripting vulnerability

Which CVE IDs does GHSA-prrh-qvhf-x788 cover?

GHSA-prrh-qvhf-x788 covers the following CVE IDs: CVE-2022-35933. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-prrh-qvhf-x788?

GHSA-prrh-qvhf-x788 has a CVSS v3 base score of 4.3, published by GitHub Security Advisories.

Which products are affected by GHSA-prrh-qvhf-x788?

GHSA-prrh-qvhf-x788 affects 1 product, including: composer/prestashop/productcomments:\u003c 5.0.2.

GHSA-prrh-qvhf-x788MediumCVSS 4.3

PrestaShop Product Comments Cross-site Scripting vulnerability

Vendor

GitHub Security Advisories

Published

August 31, 2022

Last Modified

January 31, 2023

🔗 CVE IDs covered (1)

CVE-2022-35933 →

📋 Description

Impact

An attacker could steal an admin's cookie

Patches

The issue is fixed in 5.0.2

References

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

🎯 Affected products1

composer/prestashop/productcomments:< 5.0.2

🔗 References (4)

https://github.com/PrestaShop/productcomments/security/advisories/GHSA-prrh-qvhf-x788
https://github.com/PrestaShop/productcomments/commit/314456d739155aa71f0b235827e8e0f24b97c26b
https://nvd.nist.gov/vuln/detail/CVE-2022-35933
https://github.com/advisories/GHSA-prrh-qvhf-x788