Skip to content
OpenAdvisories

Package · Packagist

prestashop/contactform

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2020-15178

    Potential XSS in PrestaShop contactform

    In PrestaShop contactform module (prestashop/contactform) before version 4.3.0, an attacker is able to inject JavaScript while using the contact form. The `message` field was incorrectly unescaped, possibly allowing attackers to execute arbitrary JavaScript i…

    PrestaShop contactform prestashop/contactform Packagist