Medium 6.1 CVSS 3.1 amazzing_filter Published on 2023-11-28

Cross Site Scripting (XSS) in Search filters in Prestashop Amazzing filter version up to version 3.2.5, allows remote attackers to inject arbitrary JavaScript…

CVECVE-2023-48042 GHSANo GHSA advisory

View at the source View JSON Last modified at the source: 2026-06-17

Description

Cross Site Scripting (XSS) in Search filters in Prestashop Amazzing filter version up to version 3.2.5, allows remote attackers to inject arbitrary JavaScript code.

Original text by NVD (NIST), public domain.

CVSS metrics 3.1

Source: nvd@nist.gov · primary

Medium 6.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Attack vectorNetwork

ComplexityLow

Privileges requiredNone

User interactionRequired

ScopeChanged

ConfidentialityLow

IntegrityLow

AvailabilityNone

References

Productaddons.prestashop.com
https://addons.prestashop.com/en/search-filters/18575-amazzing-filter.html
Third Party Advisorymedium.com
https://medium.com/%40nasir.synack/uncovering-a-cross-site-scripting-vulnerability-cve-2023-48042-in-amazzing-filters-prestashop-2e4a9f8b655e

Found a vulnerability?

Write to the PrestaShop core security team:

security-core@prestashop.com

Do you use the amazzing_filter module?

PrestaShield checks it from the outside, without FTP access, and alerts you of every new advisory that affects you.

Check if my shop is affected