CVE-2023-39527

Published August 7th, 2023

View on NVD ↗

CVSS v3

8.3

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to cross-site scripting through the `isCleanHTML` method. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.

PrestaShop/PrestaShop

PrestaShop is the universal open-source software platform to build your e-commerce solution.

GitHub

9.1K