Description
PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to cross-site scripting through the `isCleanHTML` method. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.
Remediation
References
Related Vulnerabilities
Ruby Improper Input Validation Vulnerability (CVE-2015-1855)
WordPress Plugin WP e-Commerce Shop Styling Remote File Inclusion (1.7.2)
MySQL NULL Pointer Dereference Vulnerability (CVE-2021-22570)
Drupal Permissions, Privileges, and Access Controls Vulnerability (CVE-2008-3745)
WordPress Plugin All-In-One Security (AIOS)-Security and Firewall Cross-Site Scripting (4.1.9)