Description
PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to cross-site scripting through the `isCleanHTML` method. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.
Remediation
References
Related Vulnerabilities
Oracle Database Server CVE-2012-0512 Vulnerability (CVE-2012-0512)
WordPress Plugin Event Registration 'id' Parameter SQL Injection (5.43)
Atlassian Jira Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2019-11586)
WordPress Plugin WP Symposium Pro Social Network Multiple Vulnerabilities (15.12)