Skip to content
OpenAdvisories

Product · PrestaShop

productcomments

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 4.3
    CVE-2022-35933

    PrestaShop module Product Comments vulnerable to cross-site scripting (XSS)

    This package is a PrestaShop module that allows users to post reviews and rate products. There is a vulnerability where the attacker could steal an administrator's cookie. The issue is fixed in version 5.0.2.

    PrestaShop productcomments prestashop/productcomments Packagist
  • Medium 6.8
    CVE-2020-26248 Scanner template EPSS 12%

    Blind SQL injection during the CommentGrade process

    In the PrestaShop module "productcomments" before version 4.2.1, an attacker can use a Blind SQL injection to retrieve data or stop the MySQL service. The problem is fixed in 4.2.1 of the module.

    PrestaShop productcomments prestashop/productcomments Packagist