Description
In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is a reflected XSS with `back` parameter. The problem is fixed in 1.7.6.5
Remediation
References
Related Vulnerabilities
Oracle JRE CVE-2013-2432 Vulnerability (CVE-2013-2432)
WebLogic Missing Authentication for Critical Function Vulnerability (CVE-2026-60200)
SharePoint Authentication Bypass by Spoofing Vulnerability (CVE-2021-42320)
WebLogic CVE-2018-2998 Vulnerability (CVE-2018-2998)
phpMyAdmin Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2011-2505)