Skip to content
OpenAdvisories

Package · Packagist

prestashop/ps_contactinfo

1 known vulnerabilities.

1 result · Feed

  • Medium 6.2

    ps_contactinfo has potential XSS due to usage of the nofilter tag in template

    ps_contactinfo, a PrestaShop module for displaying store contact information, has a cross-site scripting (XSS) vulnerability in versions up to and including 3.3.2. This can not be exploited in a fresh install of PrestaShop, only shops made vulnerable by third…