CVE-2020-5266

MEDIO 5.4CVE-2020-5266 · Published 16/04/2020 · updated 17/06/2026

In breve

CVE-2020-5266 è una vulnerabilità MEDIO (CVSS 5.4) che riguarda prestashop link (prestashop).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.64%, superiore al 50.6% delle vulnerabilità.
Correzione: aggiornare a 3.1.0 o successiva.

Package	Affected versions	Patched versions
prestashop link prestashop	`≥ 1.0.4, < 3.1.0`	`3.1.0`

Description

In the ps_link module for PrestaShop before version 3.1.0, there is a stored XSS when you create or edit a link list block with the title field. The problem is fixed in 3.1.0

References

PrestaShop/ps_linklist commit b90005c · Patch
PrestaShop/ps_linklist security advisory · Third Party Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free