Description
In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminFeatures page by using the `id_feature` parameter. The problem is fixed in 1.7.6.5
Remediation
References
Related Vulnerabilities
MySQL CVE-2022-21357 Vulnerability (CVE-2022-21357)
Apache HTTP Server Numeric Errors Vulnerability (CVE-2009-1956)
Ruby Improper Authentication Vulnerability (CVE-2008-3905)
WordPress Plugin Pay With Tweet SQL Injection and Cross-Site Scripting Vulnerabilities (1.1)
WordPress Plugin Shopping Cart & eCommerce Store Cross-Site Request Forgery (5.1.0)