PT-2020-12534 · Prestashop · Prestashop

Matkspublished · Published 2020-07-02 · Updated 2023-01-27 · CVE-2020-11074

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PrestaShop versions 1.5.3.0 through 1.7.6.6 PrestaShop versions 1.5.3.0 through 1.7.7.6

Description The issue is related to a stored XSS when using the name of a quick access item.

Recommendations For PrestaShop versions 1.5.3.0 through 1.7.6.6, update to version 1.7.6.6 to resolve the issue. For PrestaShop versions 1.5.3.0 through 1.7.7.6, update to version 1.7.7.6 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-11074

GHSA-V4PG-Q2CV-F7X4

Affected Products

Prestashop

References · 5

• https://github.com/PrestaShop/PrestaShop/commit/d122b82bcc2ad8a7b05cfffc03df6c2cae08efe8 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-11074 · Security Note
• https://osv.dev/vulnerability/CVE-2020-11074 · Vendor Advisory
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-v4pg-q2cv-f7x4 · Note
• https://t.me/cvenotify/4832 · Telegram Post