Skip to content
CVE PROGRAM SOURCE RECORD8.3 High

CVE-2023-39527

PrestaShop XSS vulnerability through Validate::isCleanHTML method

Description

PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to cross-site scripting through the `isCleanHTML` method. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PrestaShop PrestaShop

  • < 1.7.8.10affected
  • >= 8.0.0, < 8.0.5affected
  • = 8.1.0affected

References