Reflected cross-site scripting (XSS) In drupal/core
Description
PrestaShop Cross-site Scripting vulnerability
In PrestaShop 1.7.5.2, the shop_country parameter in the install/index.php installation script/component is affected by Reflected XSS. Exploitation by a malicious actor requires the user to follow the initial stages of the setup (accepting terms and conditions) before executing the malicious link.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 packagist | 8.7.1 | ||
packagist | 1.7.6.0 |
Aliases
1. 2. 3. 4.
References
1. 2. 3. 4.