CVE-2026-44212: cross-site scripting (XSS) in PrestaShop — customer-service view and contact email
PrestaShop and CVE-2026-44212: a practical explanation of cross-site scripting (XSS) in customer-service view and contact email…
// category
XSS
Opinion, technical notes and research on web development, servers, performance and cyber security.
CVE-2026-33673: cross-site scripting (XSS) in PrestaShop — back-office template variables
PrestaShop and CVE-2026-33673: a practical explanation of cross-site scripting (XSS) in back-office template variables…
CVE-2025-1230: cross-site scripting (XSS) in PrestaShop — administration link parameter
PrestaShop and CVE-2025-1230: a practical explanation of cross-site scripting (XSS) in administration link parameter, real-world…
CVE-2024-34716: cross-site scripting (XSS) in PrestaShop — contact form file attachment
PrestaShop and CVE-2024-34716: a practical explanation of cross-site scripting (XSS) in contact form file attachment, real-world…
CVE-2024-21628: cross-site scripting (XSS) in PrestaShop — front-office order messages
PrestaShop and CVE-2024-21628: a practical explanation of cross-site scripting (XSS) in front-office order messages, real-world…
CVE-2024-21627: cross-site scripting (XSS) in PrestaShop — HTML attributes in Validate::isCleanHTML
PrestaShop and CVE-2024-21627: a practical explanation of cross-site scripting (XSS) in HTML attributes in…
CVE-2023-39527: cross-site scripting (XSS) in PrestaShop — Validate::isCleanHTML
PrestaShop and CVE-2023-39527: a practical explanation of cross-site scripting (XSS) in Validate::isCleanHTML, real-world…
CVE-2023-30838: cross-site scripting (XSS) in PrestaShop — ValidateCore::isCleanHTML and CSS events
PrestaShop and CVE-2023-30838: a practical explanation of cross-site scripting (XSS) in ValidateCore::isCleanHTML and CSS…
CVE-2021-21398: cross-site scripting (XSS) in PrestaShop — DataColumn Grid class
PrestaShop and CVE-2021-21398: a practical explanation of cross-site scripting (XSS) in DataColumn Grid class, real-world…
CVE-2020-15162: cross-site scripting (XSS) in PrestaShop — customer-uploaded files
PrestaShop and CVE-2020-15162: a practical explanation of cross-site scripting (XSS) in customer-uploaded files, real-world…