CVE-2020-5266 MEDIUM

CVE-2020-5266: Stored XSS on back office edit page

Vendor Prestashop
Product ps_linklist
Weakness CWE-79 · XSS
Published April 16, 2020
Last update August 4, 2024
View on NVD All CVEs

CVSS base score

4.4/10
Attack vector Network
Attack complexity High
Privileges required Low
User interaction Required
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N

What the vulnerability does

01Description

In the ps_link module for PrestaShop before version 3.1.0, there is a stored XSS when you create or edit a link list block with the title field. The problem is fixed in 3.1.0

Key dates

02Disclosure timeline

April 16, 2020 CVE published
August 4, 2024 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-41876 Adobe Experience Manager | Cross-site Scripting (Reflected XSS) (CWE-79) CVE-2024-36158 Adobe Experience Manager | Cross-site Scripting (Stored XSS) (CWE-79) CVE-2024-0598 Gutenberg Blocks by Kadence Blocks <= 3.2.17 - Authenticated(Editor+) Stored Cross-Site Scripting via Contact Form Message Settings CVE-2025-8542 Portabilis i-Educar empresas_cad.php cross site scripting CVE-2024-4379 Premium Addons for Elementor <= 4.10.31 - Authenticated (Contributor+) DOM-Based Stored Cross-Site Scripting via Global Tooltip