Skip to content
CVE PROGRAM SOURCE RECORD4.4 Medium

CVE-2020-5266

Stored XSS on back office edit page

Description

In the ps_link module for PrestaShop before version 3.1.0, there is a stored XSS when you create or edit a link list block with the title field. The problem is fixed in 3.1.0

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PrestaShop ps_linklist

  • < 3.1.0affected

References