Show filters
121 Total Results
Displaying 81-90 of 121
Sort by:
Attacker Value
Unknown
CVE-2020-5279
Disclosure Date: April 20, 2020 (last updated February 21, 2025)
In PrestaShop between versions 1.5.0.0 and 1.7.6.5, there are improper access control since the the version 1.5.0.0 for legacy controllers. - admin-dev/index.php/configure/shop/customer-preferences/ - admin-dev/index.php/improve/international/translations/ - admin-dev/index.php/improve/international/geolocation/ - admin-dev/index.php/improve/international/localization - admin-dev/index.php/configure/advanced/performance - admin-dev/index.php/sell/orders/delivery-slips/ - admin-dev/index.php?controller=AdminStatuses The problem is fixed in 1.7.6.5
0
Attacker Value
Unknown
CVE-2020-5288
Disclosure Date: April 20, 2020 (last updated February 21, 2025)
"In PrestaShop between versions 1.7.0.0 and 1.7.6.5, there is improper access controls on product attributes page. The problem is fixed in 1.7.6.5.
0
Attacker Value
Unknown
CVE-2020-5272
Disclosure Date: April 20, 2020 (last updated February 21, 2025)
In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is a reflected XSS on Search page with `alias` and `search` parameters. The problem is patched in 1.7.6.5
0
Attacker Value
Unknown
CVE-2020-5285
Disclosure Date: April 20, 2020 (last updated February 21, 2025)
In PrestaShop between versions 1.7.6.0 and 1.7.6.5, there is a reflected XSS with `back` parameter. The problem is fixed in 1.7.6.5
0
Attacker Value
Unknown
CVE-2020-5271
Disclosure Date: April 20, 2020 (last updated February 21, 2025)
In PrestaShop between versions 1.6.0.0 and 1.7.6.5, there is a reflected XSS with `date_from` and `date_to` parameters in the dashboard page This problem is fixed in 1.7.6.5
0
Attacker Value
Unknown
CVE-2020-5266
Disclosure Date: April 16, 2020 (last updated February 21, 2025)
In the ps_link module for PrestaShop before version 3.1.0, there is a stored XSS when you create or edit a link list block with the title field. The problem is fixed in 3.1.0
0
Attacker Value
Unknown
CVE-2020-5273
Disclosure Date: April 16, 2020 (last updated February 21, 2025)
In PrestaShop module ps_linklist versions before 3.1.0, there is a stored XSS when using custom URLs. The problem is fixed in version 3.1.0
0
Attacker Value
Unknown
CVE-2020-5294
Disclosure Date: April 16, 2020 (last updated February 21, 2025)
PrestaShop module ps_facetedsearch versions before 2.1.0 has a reflected XSS with social networks fields The problem is fixed in 2.1.0
0
Attacker Value
Unknown
CVE-2020-5277
Disclosure Date: March 25, 2020 (last updated February 21, 2025)
PrestaShop module ps_facetedsearch versions before 3.5.0 has a reflected XSS with `url_name` parameter. The problem is fixed in 3.5.0
0
Attacker Value
Unknown
CVE-2020-5250
Disclosure Date: March 05, 2020 (last updated February 21, 2025)
In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the form, and thus steal someone else's address. It is the same with CustomerForm, you are able to change the id_customer and change all information of all accounts. The problem is patched in version 1.7.6.4.
0
