{"action":"Upgrade prestashop/prestashop to 1.7.8.11 or later.","affected":[{"fixed":"8.1.3","introduced":"8.0.0-beta.1"},{"fixed":"1.7.8.11","introduced":"0"}],"component":"prestashop/prestashop","cve_ids":["CVE-2024-21627"],"ecosystem":"Packagist","epss":0.00523,"exploited":false,"fixed_versions":["8.1.3","1.7.8.11"],"ghsa_id":"GHSA-xgpm-q3mq-46rq","id":"tcs_01M5KFB1J68QNS0G759RNV8NWE","modified_at":"2026-09-10T03:50:05.157935596Z","published_at":"2024-01-03T21:41:14Z","references":["https://osv.dev/vulnerability/GHSA-xgpm-q3mq-46rq","https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-xgpm-q3mq-46rq","https://nvd.nist.gov/vuln/detail/CVE-2024-21627","https://github.com/PrestaShop/PrestaShop/commit/0ed1af8de500538490f88e9e794e2e8113fb8df7","https://github.com/PrestaShop/PrestaShop/commit/73cfb44666818eefd501b526a894fe884dd12129","https://github.com/PrestaShop/PrestaShop/commit/ba06d18466df5b92cb841d504cc7210121104883","https://github.com/PrestaShop/PrestaShop/commit/f799dcff564cd1b7ead932ffc3343b675107dbce","https://github.com/PrestaShop/PrestaShop"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-xgpm-q3mq-46rq","url":"https://osv.dev/vulnerability/GHSA-xgpm-q3mq-46rq"}],"summary":"PrestaShop some attribute not escaped in Validate::isCleanHTML method"}