Description
PrestaShop before 1.4.11 allows Logistician, translators and other low level profiles/accounts to inject a persistent XSS vector on TinyMCE.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | prestashop/prestashop | < 1.4.11 | 1.4.11 | GHSA-crpg-2mm2-jjqf |