Skip to content
CVE PROGRAM SOURCE RECORD5.4 Medium

CVE-2021-21398

Possible XSS injection through DataColumn Grid class

Description

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.7.3, an attacker can inject HTML when the Grid Column Type DataColumn is badly used. The problem is fixed in 1.7.7.3

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PrestaShop PrestaShop

  • >= 1.7.7.0, < 1.7.7.3affected

References