CVE-2020-15162

Published September 24th, 2020

View on NVD ↗

CVSS v3

5.4

MEDIUM

CVSS v2

3.5

LOW

Affected

PROJECT

Description

In PrestaShop from version 1.5.0.0 and before version 1.7.6.8, users are allowed to send compromised files. These attachments allowed people to input malicious JavaScript which triggered an XSS payload. The problem is fixed in version 1.7.6.8.

PrestaShop/PrestaShop

PrestaShop is the universal open-source software platform to build your e-commerce solution.

GitHub

9.1K