Description
In PrestaShop between versions 1.7.1.0 and 1.7.6.5, there is a reflected XSS on AdminCarts page with `cartBox` parameter The problem is fixed in 1.7.6.5
Remediation
References
Related Vulnerabilities
WordPress Plugin Easy Team Manager SQL Injection (1.3.2)
Joomla! Core 1.0.x Security Bypass (1.0.0 - 1.0.10)
Adobe Coldfusion 8 multiple linked XSS vulnerabilies
WordPress Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2018-20151)
MyBB Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-2335)