Security Advisory

CVE-2020-15162

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2020-09-24 22:15:14

Last updated 2024-08-04 13:08:22

Assigner GitHub_M

State PUBLISHED

Description

In PrestaShop from version 1.5.0.0 and before version 1.7.6.8, users are allowed to send compromised files. These attachments allowed people to input malicious JavaScript which triggered an XSS payload. The problem is fixed in version 1.7.6.8.

← Browse all CVEs View on cve.org ↗