CVE-2020-26225
1 advisory.
Packagist/prestashop/productcomments CVE-2020-26225: high 8.7, EPSS 0.89%
Reflected XSS with parameters in PostComment
Action: Upgrade prestashop/productcomments to 4.2.0 or later.
composer require prestashop/productcomments:4.2.0Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.2.0 | - |
Fixed versions
| 4.2.0 |
Sources
- osv: GHSA-58w4-w77w-qv3w
- https://github.com/PrestaShop/productcomments/security/advisories/GHSA-58w4-w77w-qv3w
- https://nvd.nist.gov/vuln/detail/CVE-2020-26225
- https://github.com/PrestaShop/productcomments/commit/c56e3e9495c4a0a9c1e7dc43e1bb0fcad2796dbf
CVE-2020-26225 · published · modified · JSON