Headline
GHSA-6mhc-hqr3-w466: PrestaShop Cross-site Scripting vulnerability
A cross-site scripting (XSS) vulnerability in PrestaShop v1.7.7.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the message parameter in /contactform/contactform.php.
PrestaShop Cross-site Scripting vulnerability
Moderate severity GitHub Reviewed Published May 12, 2023 to the GitHub Advisory Database • Updated May 12, 2023
Related news
CVE-2023-31508: Research/ReflectedXSS_1.7.7.4.md at main · mustgundogdu/Research
A cross-site scripting (XSS) vulnerability in PrestaShop v1.7.7.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the message parameter in /contactform/contactform.php.