CVE-2023-39527

Published: 2023-08-07T21:15Z

Last Modified: 2024-11-21T08:15Z

Source: MITRE CVE List

License: MITRE-CVE-TOS

PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to cross-site scripting through the `isCleanHTML` method. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds. > MITRE Terms of Use apply – see LICENSE‑MITRE.txt