Description

PrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module

Remediation

References

CVE-2013-6295

Related Vulnerabilities

WordPress Plugin Events Made Easy Cross-Site Scripting (1.6.20)

Magento Improper Authentication Vulnerability (CVE-2015-3457)

WordPress Plugin Live Chat with Facebook Messenger Cross-Site Scripting (1.4.4)

Joomla URL Redirection to Untrusted Site ('Open Redirect') Vulnerability (CVE-2020-24598)

WordPress Plugin YITH WooCommerce Cart Messages Security Bypass (1.4.3)

Severity

Critical

Classification

CVE-2013-6295 CWE-269 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities