CVE-2020-5265 - Reflected XSS on AdminAttributesGroups page of PrestaShop

MEDIUM

Reflected XSS on AdminAttributesGroups page of PrestaShop

Published Apr 20, 2020

6.1

MEDIUM

CVSS 3.1

EPSS 0.76%

In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminAttributesGroups page. The problem is patched in 1.7.6.5.

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

n/a

Version	Status	Constraints
>= 1.7.6.1, < 1.7.6.5	affected	-

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://github.com/PrestaShop/PrestaShop/commit/622ba66ffdbf48b399875003e00bc34d8a3ef712		x_refsource_MISCPatchThird Party Advisory
https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-7fmr-5vcc-329j		x_refsource_CONFIRMPatchThird Party Advisory