Medium 5.4 CVSS 3.1 ps_socialfollow Published on 2020-04-16

Reflected XSS with social networks fields

CVECVE-2020-5294 GHSAGHSA-774w-fg8p-7c8w

View at the source View JSON Last modified at the source: 2026-06-17

Description

Reflected XSS with social networks fields

The problem is fixed in 2.1.0

Original text by NVD (NIST), public domain.

Source: security-advisories@github.com · secondary

Medium 5.4

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack vectorNetwork

ComplexityLow

Privileges requiredLow

User interactionRequired

ScopeChanged

ConfidentialityLow

IntegrityNone

AvailabilityNone

Write to the PrestaShop core security team:

PrestaShield checks it from the outside, without FTP access, and alerts you of every new advisory that affects you.