PT-2020-18383 · Prestashop · Prestashop+1

Pierre Rambaud · Published 2020-04-16 · Updated 2020-04-22 · CVE-2020-5294

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions PrestaShop module ps facetedsearch versions prior to 2.1.0

Description The issue concerns a reflected XSS related to social networks fields. The problem has been fixed in version 2.1.0.

Recommendations For PrestaShop module ps facetedsearch versions prior to 2.1.0, update to version 2.1.0 to resolve the issue.

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2020-5294

GHSA-774W-FG8P-7C8W

Affected Products

Prestashop

Ps Facetedsearch

References · 4

• https://github.com/PrestaShop/ps_socialfollow/commit/c1768bf14c0fcf8311bea15fba4ffdda45522d6b · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-5294 · Security Note
• https://osv.dev/vulnerability/CVE-2020-5294 · Vendor Advisory
• https://github.com/PrestaShop/ps_socialfollow/security/advisories/GHSA-774w-fg8p-7c8w · Note