Skip to content
OpenAdvisories
Medium · 5.4 CVE-2021-21398 EUVD-2021-8695

Possible XSS injection through DataColumn Grid class

Published Mar 30, 2021 · Updated Aug 3, 2024 · Assigned by GitHub_M

Description

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.7.3, an attacker can inject HTML when the Grid Column Type DataColumn is badly used. The problem is fixed in 1.7.7.3

Affected products

VendorProductAffectedFixed
PrestaShop PrestaShop >= 1.7.7.0, < 1.7.7.3 —

References