Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-11876
4.3
MEDIUMCVSS v2
Published
May 24, 2019
Affected
4 projects
Assigned by
MITRE
Severity scale
010
Description
In PrestaShop 1.7.5.2, the shop_country parameter in the install/index.php installation script/component is affected by Reflected XSS. Exploitation by a malicious actor requires the user to follow the initial stages of the setup (accepting terms and conditions) before executing the malicious link.
PrestaShop/PrestaShop
GitHubPrestaShop is the universal open-source software platform to build your e-commerce solution.
GitHubPrestaShop is the universal open-source software platform to build your e-commerce solution.= 1.7.5.2NVD
drupal/drupalGitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.
GitHubVerbatim mirror of the git.drupal.org repository for Drupal core. Please see the https://github.com/drupal/drupal#contributing. PRs are not accepted on GitHub.= 8.7.0NVD
RubyGems
NPM