CVE-2022-35933
1 advisory.
Packagist/prestashop/productcomments CVE-2022-35933: medium 4.3
PrestaShop Product Comments Cross-site Scripting vulnerability
Action: Upgrade prestashop/productcomments to 5.0.2 or later.
composer require prestashop/productcomments:5.0.2Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 5.0.2 | - |
Fixed versions
| 5.0.2 |
Sources
- osv: GHSA-prrh-qvhf-x788
- https://github.com/PrestaShop/productcomments/security/advisories/GHSA-prrh-qvhf-x788
- https://nvd.nist.gov/vuln/detail/CVE-2022-35933
- https://github.com/PrestaShop/productcomments/commit/314456d739155aa71f0b235827e8e0f24b97c26b
- https://github.com/PrestaShop/productcomments
CVE-2022-35933 · published · modified · JSON