Description

Cross-site scripting (XSS) vulnerability in blocklayered-ajax.php in the blocklayered module in PrestaShop 1.6.0.9 and earlier allows remote attackers to inject arbitrary web script or HTML via the layered_price_slider parameter.

Remediation

References

CVE-2015-1175

Related Vulnerabilities

MySQL CVE-2021-35647 Vulnerability (CVE-2021-35647)

osTicket Observable Discrepancy Vulnerability (CVE-2026-26895)

Oracle JRE CVE-2013-5772 Vulnerability (CVE-2013-5772)

WordPress Plugin Custom Field Suite Cross-Site Scripting (2.5.14)

TYPO3 Improper Restriction of XML External Entity Reference Vulnerability (CVE-2020-26229)

Severity

Medium

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2015-1175