| Package | Affected versions | Patched versions |
|---|---|---|
| prestashop | > 1.6.0.0, < 1.7.6.5 | 1.7.6.5 |
In PrestaShop between versions 1.6.0.0 and 1.7.6.5, there is a reflected XSS with `date_from` and `date_to` parameters in the dashboard page This problem is fixed in 1.7.6.5
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free