CVE-2024-21628
1 advisory.
Packagist/prestashop/prestashop CVE-2024-21628: medium 5.4
PrestaShop XSS can be stored in DB from "add a message form" in order detail page (FO)
Action: Upgrade prestashop/prestashop to 8.1.3 or later.
composer require prestashop/prestashop:8.1.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.1.3 | - |
Fixed versions
| 8.1.3 |
Sources
- osv: GHSA-vr7m-r9vm-m4wf
- https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-vr7m-r9vm-m4wf
- https://nvd.nist.gov/vuln/detail/CVE-2024-21628
- https://github.com/PrestaShop/PrestaShop/commit/afc45b93b3cc33be0e571559d2838c6960d98856
- https://github.com/PrestaShop/PrestaShop/commit/c3d78b7e49f5fe49a9d07725c3174d005deaa597
- https://github.com/PrestaShop/PrestaShop
CVE-2024-21628 · published · modified · JSON