PrestaShop Stored Cross-Site Scripting Vulnerability

MEDIO 5.4CVE-2013-4791 · GHSA-crpg-2mm2-jjqf · Published 14/02/2020 · updated 16/06/2026

In breve

CVE-2013-4791 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda prestashop/prestashop, prestashop (prestashop).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.56%, superiore al 46.4% delle vulnerabilità.
Correzione: aggiornare a 1.4.11 o successiva.

Package	Affected versions	Patched versions
prestashop/prestashop Packagist	`< 1.4.11`	`1.4.11`
prestashop prestashop	`< 1.4.11`	`1.4.11`

PrestaShop before 1.4.11 allows Logistician, translators and other low level profiles/accounts to inject a persistent XSS vector on TinyMCE.

NVD description

PrestaShop before 1.4.11 allows Logistician, translators and other low level profiles/accounts to inject a persistent XSS vector on TinyMCE.

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Package

Affected versions

Patched versions

Packagist

< 1.4.11

1.4.11

< 1.4.11

1.4.11

Altre vulnerabilità di prestashop/prestashop

Vedi tutto →