Description
PrestaShop before 1.5.2 allows XSS via the "<object data='data:text/html" substring in the message field.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | prestashop/prestashop | < 1.5.2.0 | 1.5.2.0 | GHSA-j33m-2537-86jm |
Medium · 6.1
CVE-2012-20001
EUVD-2022-1765GHSA-j33m-2537-86jm
PrestaShop XSS Vulnerability
Published Dec 21, 2021 · Updated Aug 6, 2024 · Assigned by mitre