| Package | Affected versions | Patched versions |
|---|---|---|
| prestashop | > 1.7.6.1, < 1.7.6.5 | 1.7.6.5 |
In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminFeatures page by using the `id_feature` parameter. The problem is fixed in 1.7.6.5
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free