Vulnerability Details CVE-2020-5264
In PrestaShop before version 1.7.6.5, there is a reflected XSS while running the security compromised page. It allows anyone to execute arbitrary action. The problem is patched in the 1.7.6.5.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.6%
CVSS Severity
CVSS v3 Score 4.4
CVSS v2 Score 4.3
Products affected by CVE-2020-5264
-
cpe:2.3:a:prestashop:prestashop:1.7.0.1
-
cpe:2.3:a:prestashop:prestashop:1.7.0.2
-
cpe:2.3:a:prestashop:prestashop:1.7.0.3
-
cpe:2.3:a:prestashop:prestashop:1.7.0.4
-
cpe:2.3:a:prestashop:prestashop:1.7.0.5
-
cpe:2.3:a:prestashop:prestashop:1.7.0.6
-
cpe:2.3:a:prestashop:prestashop:1.7.1.0
-
cpe:2.3:a:prestashop:prestashop:1.7.1.1
-
cpe:2.3:a:prestashop:prestashop:1.7.1.2
-
cpe:2.3:a:prestashop:prestashop:1.7.2.0
-
cpe:2.3:a:prestashop:prestashop:1.7.2.1
-
cpe:2.3:a:prestashop:prestashop:1.7.2.2
-
cpe:2.3:a:prestashop:prestashop:1.7.2.3
-
cpe:2.3:a:prestashop:prestashop:1.7.2.4
-
cpe:2.3:a:prestashop:prestashop:1.7.2.5
-
cpe:2.3:a:prestashop:prestashop:1.7.3.0
-
cpe:2.3:a:prestashop:prestashop:1.7.3.1
-
cpe:2.3:a:prestashop:prestashop:1.7.3.2
-
cpe:2.3:a:prestashop:prestashop:1.7.3.3
-
cpe:2.3:a:prestashop:prestashop:1.7.3.4
-
cpe:2.3:a:prestashop:prestashop:1.7.4.0
-
cpe:2.3:a:prestashop:prestashop:1.7.4.1
-
cpe:2.3:a:prestashop:prestashop:1.7.4.2
-
cpe:2.3:a:prestashop:prestashop:1.7.4.3
-
cpe:2.3:a:prestashop:prestashop:1.7.4.4
-
cpe:2.3:a:prestashop:prestashop:1.7.5.0
-
cpe:2.3:a:prestashop:prestashop:1.7.5.1
-
cpe:2.3:a:prestashop:prestashop:1.7.5.2
-
cpe:2.3:a:prestashop:prestashop:1.7.6.0
-
cpe:2.3:a:prestashop:prestashop:1.7.6.1
-
cpe:2.3:a:prestashop:prestashop:1.7.6.2
-
cpe:2.3:a:prestashop:prestashop:1.7.6.3
-
cpe:2.3:a:prestashop:prestashop:1.7.6.4