GitStock

prestashop/ps_linklist · Security

Stored XSS with custom URLs in PrestaShop module ps_linklist

GHSA ID
GHSA-cx2r-mf6x-55rx
CVE ID
CVE-2020-5273
Severity
medium
Published
Updated
CVSS
4.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N
CVSS v3
4.1 · CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N

Description

Impact

Stored XSS when using custom URLs.

Patches

The problem is fixed in 3.1.0

References

Cross-site Scripting (XSS) - Stored (CWE-79)

CWEs

  • CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

References