Security Advisory
CVE-2013-4791
CVE vulnerability detail — eXtreme Datacenter Security Operations
Description
PrestaShop before 1.4.11 allows Logistician, translators and other low level profiles/accounts to inject a persistent XSS vector on TinyMCE.