Security Advisory

CVE-2020-15161

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-09-24 22:10:13
Last updated 2024-08-04 13:08:22
Assigner GitHub_M
State PUBLISHED

Description

In PrestaShop from version 1.6.0.4 and before version 1.7.6.8 an attacker is able to inject javascript while using the contact form. The problem is fixed in 1.7.6.8