Description
Stored XSS with custom URLs
Impact
Stored XSS when using custom URLs.
Patches
The problem is fixed in 3.1.0
References
Original text by NVD (NIST), public domain.
CVSS metrics 3.1
Source: security-advisories@github.com · secondaryCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:NAttack vectorNetwork
ComplexityLow
Privileges requiredLow
User interactionRequired
ScopeChanged
ConfidentialityLow
IntegrityNone
AvailabilityNone
References
Found a vulnerability?
Write to the PrestaShop core security team:
security-core@prestashop.com