Description
PrestaShop module ps_facetedsearch versions before 3.5.0 has a reflected XSS with `url_name` parameter. The problem is fixed in 3.5.0
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PrestaShop | ps_facetedsearch | < 3.5.0 | — |
Medium · 4.1
CVE-2020-5277
EUVD-2020-26474
Reflected XSS with url_name parameter of PrestaShop module ps_facetedsearch
Published Mar 25, 2020 · Updated Aug 4, 2024 · Assigned by GitHub_M