CVEDB API

In PrestaShop between versions 1.7.4.0 and 1.7.6.5, there is a reflected XSS when uploading a wrong file. The problem is fixed in 1.7.6.5

Exploit prediction scoring system (EPSS) score

EPSS Score 0.002

EPSS Ranking 44.4%

CVSS Severity

CVSS v3 Score 4.1

CVSS v2 Score 4.3

References

Products affected by CVE-2020-5286

Prestashop » Prestashop » Version: 1.7.4.1

cpe:2.3:a:prestashop:prestashop:1.7.4.1
Prestashop » Prestashop » Version: 1.7.4.2

cpe:2.3:a:prestashop:prestashop:1.7.4.2
Prestashop » Prestashop » Version: 1.7.4.3

cpe:2.3:a:prestashop:prestashop:1.7.4.3
Prestashop » Prestashop » Version: 1.7.4.4

cpe:2.3:a:prestashop:prestashop:1.7.4.4
Prestashop » Prestashop » Version: 1.7.5.0

cpe:2.3:a:prestashop:prestashop:1.7.5.0
Prestashop » Prestashop » Version: 1.7.5.1

cpe:2.3:a:prestashop:prestashop:1.7.5.1
Prestashop » Prestashop » Version: 1.7.5.2

cpe:2.3:a:prestashop:prestashop:1.7.5.2
Prestashop » Prestashop » Version: 1.7.6.0

cpe:2.3:a:prestashop:prestashop:1.7.6.0
Prestashop » Prestashop » Version: 1.7.6.1

cpe:2.3:a:prestashop:prestashop:1.7.6.1
Prestashop » Prestashop » Version: 1.7.6.2

cpe:2.3:a:prestashop:prestashop:1.7.6.2
Prestashop » Prestashop » Version: 1.7.6.3

cpe:2.3:a:prestashop:prestashop:1.7.6.3
Prestashop » Prestashop » Version: 1.7.6.4

cpe:2.3:a:prestashop:prestashop:1.7.6.4