PrestaShop Product Comments Cross-site Scripting vulnerability

概要

参考情報

• PrestaShop/productcomments security advisory · WEB
• nvd.nist.gov/vuln/detail/CVE-2022-35933 · ADVISORY
• PrestaShop/productcomments commit 314456d · WEB
• PrestaShop/productcomments · PACKAGE

prestashop/productcomments のその他の脆弱性

• CVE-2020-26248高 8.2In the PrestaShop module "productcomments" before version 4.2.1, an attacker can use a Blind SQL injection to retrieve data or stop the MySQ…
• CVE-2020-26225中 6.1In PrestaShop Product Comments before version 4.2.0, an attacker could inject malicious web code into the users' web browsers by creating a …