Description
PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to cross-site scripting through the `isCleanHTML` method. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PrestaShop | PrestaShop | < 1.7.8.10, >= 8.0.0, < 8.0.5, = 8.1.0 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | prestashop/prestashop | >= 8.1.0, < 8.1.1 | 8.1.1 | GHSA-xw2r-f8xv-c8xp |
| Packagist | prestashop/prestashop | >= 8.0.0, < 8.0.5 | 8.0.5 | GHSA-xw2r-f8xv-c8xp |
| Packagist | prestashop/prestashop | < 1.7.8.10 | 1.7.8.10 | GHSA-xw2r-f8xv-c8xp |