ESLog inGet started free

Vulnerabilities of the productcomments module

4 known security advisories for this PrestaShop module, with affected versions and the version that fixes it.

IDAdvisorySeverityAffected versionsPublishedFix
GHSA-w68x-wjp2-mwc9 Authenticated SQL injection in the productcomments module High 7.2 ≥ 6.0.0 < 8.0.1 2026-09-11 Yes
CVE-2022-35933 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') in prestashop/productcomments Medium 6.1 < 5.0.2 2022-09-02 Yes
CVE-2020-26248 Blind SQL injection during the CommentGrade process High 8.2 < 4.2.1 2020-12-03 Yes
CVE-2020-26225 Reflected XSS with parameters in PostComment High 8.7 ≥ 4.0.0 < 4.2.0 2020-11-16 Yes

Is productcomments installed on your shop?

PrestaShield detects the installed version and alerts you if it is affected.
Check if my shop is affected