Skip to content
OpenAdvisories
Medium · 4.1 CVE-2020-5273 EUVD-2021-2192GHSA-cx2r-mf6x-55rx

Stored XSS with custom URLs in PrestaShop module ps_linklist

Published Apr 16, 2020 · Updated Aug 4, 2024 · Assigned by GitHub_M

Vendor: PrestaShop Product: ps_linklist Package: prestashop/ps_linklist Ecosystem: Packagist

Description

In PrestaShop module ps_linklist versions before 3.1.0, there is a stored XSS when using custom URLs. The problem is fixed in version 3.1.0

Affected products

VendorProductAffectedFixed
PrestaShop ps_linklist < 3.1.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist prestashop/ps_linklist < 3.1.0 3.1.0 GHSA-cx2r-mf6x-55rx

References