CVE-2020-5285: cross-site scripting (XSS) in PrestaShop — back parameter in the back office
PrestaShop and CVE-2020-5285: a practical explanation of cross-site scripting (XSS) in back parameter in the back office…
// category
PrestaShop Security
Opinion, technical notes and research on web development, servers, performance and cyber security.
CVE-2020-5269: cross-site scripting (XSS) in PrestaShop — AdminFeatures page
PrestaShop and CVE-2020-5269: a practical explanation of cross-site scripting (XSS) in AdminFeatures page, real-world impact…
CVE-2020-5270: open redirect in PrestaShop — back redirect parameter
PrestaShop and CVE-2020-5270: a practical explanation of open redirect in back redirect parameter, real-world impact, affected…
CVE-2020-5264: cross-site scripting (XSS) in PrestaShop — security-compromised page
PrestaShop and CVE-2020-5264: a practical explanation of cross-site scripting (XSS) in security-compromised page, real-world…
CVE-2020-5265: cross-site scripting (XSS) in PrestaShop — AdminAttributesGroups page
PrestaShop and CVE-2020-5265: a practical explanation of cross-site scripting (XSS) in AdminAttributesGroups page, real-world…
CVE-2020-5250: access-control weakness in PrestaShop — customer address editing
PrestaShop and CVE-2020-5250: a practical explanation of access-control weakness in customer address editing, real-world impact…
CVE-2020-6632: cross-site scripting (XSS) in PrestaShop — back-office Quick Access links
PrestaShop and CVE-2020-6632: a practical explanation of cross-site scripting (XSS) in back-office Quick Access links…
CVE-2019-13461: access-control weakness in PrestaShop — order delivery and invoice address identifiers
PrestaShop and CVE-2019-13461: a practical explanation of access-control weakness in order delivery and invoice address…
CVE-2019-11876: cross-site scripting (XSS) in PrestaShop — installer shop_country parameter
PrestaShop and CVE-2019-11876: a practical explanation of cross-site scripting (XSS) in installer shop_country parameter…
CVE-2018-20717: remote code execution in PrestaShop — back-office orders section
PrestaShop and CVE-2018-20717: a practical explanation of remote code execution in back-office orders section, real-world…