Description
In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminAttributesGroups page. The problem is patched in 1.7.6.5.
Remediation
References
Related Vulnerabilities
Moodle Improper Access Control Vulnerability (CVE-2016-3733)
PHP Other Vulnerability (CVE-2004-0958)
WordPress Plugin Broken Link Checker Cross-Site Scripting (1.10.5)
WordPress Plugin Image Gallery-Responsive Photo Gallery SQL Injection (1.8.9)
WordPress Plugin ShareYourCart Information Disclosure (1.6.1)