Skip to content
OpenAdvisories

Archive

24 May 2019

Vulnerabilities first published on this day (UTC), newest first.

3 results · Clear filters · Feed

  • Medium 6.1

    PrestaShop Cross-site Scripting vulnerability

    In PrestaShop 1.7.5.2, the shop_country parameter in the install/index.php installation script/component is affected by Reflected XSS. Exploitation by a malicious actor requires the user to follow the initial stages of the setup (accepting terms and condition…

  • Medium 6.1

    Cross-Site Scripting in shave

    XSS exists in Shave before 2.5.3 because output encoding is mishandled during the overwrite of an HTML element.

  • Medium 6.4

    It was discovered freeradius up to and including version 3.0.19 does not correctly configure logrotate, allowing a loca…