GHSA-6grv-hw8g-4gfm
PrestaShop Cross-site Scripting vulnerability
Packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| Packagist | prestashop/prestashop | >= 1.7.5.2, < 1.7.6.0 | 1.7.6.0 |
Details
As written in the advisory (Markdown source, shown as plain text).
In PrestaShop 1.7.5.2, the `shop_country` parameter in the `install/index.php` installation `script/component` is affected by Reflected XSS. Exploitation by a malicious actor requires the user to follow the initial stages of the setup (accepting terms and conditions) before executing the malicious link.
References
External links from the advisory. They lead to third-party sites.