| Package | Affected versions | Patched versions |
|---|---|---|
| prestashop/prestashop | ≥ 1.7.5.2, < 1.7.6.0 | 1.7.6.0 |
| drupal | = 8.7.0 | |
| prestashop | = 1.7.5.2 |
In PrestaShop 1.7.5.2, the shop_country parameter in the install/index.php installation script/component is affected by Reflected XSS. Exploitation by a malicious actor requires the user to follow the initial stages of the setup (accepting terms and conditions) before executing the malicious link.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free