Packagist/prestashop/productcomments CVE-2022-35933: medium 4.3, EPSS 0.56%

PrestaShop Product Comments Cross-site Scripting vulnerability

Action: Upgrade prestashop/productcomments to 5.0.2 or later.

composer require prestashop/productcomments:5.0.2

Affected

Fixed versions

Sources

• osv: GHSA-prrh-qvhf-x788
• https://github.com/PrestaShop/productcomments/security/advisories/GHSA-prrh-qvhf-x788
• https://nvd.nist.gov/vuln/detail/CVE-2022-35933
• https://github.com/PrestaShop/productcomments/commit/314456d739155aa71f0b235827e8e0f24b97c26b
• https://github.com/PrestaShop/productcomments

CVE-2022-35933 · published 2022-08-31T21:27:38Z · modified 2023-11-08T04:09:53.097557Z · JSON