Vulnerability Details CVE-2023-48042
Cross Site Scripting (XSS) in Search filters in Prestashop Amazzing filter version up to version 3.2.5, allows remote attackers to inject arbitrary JavaScript code.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 19.2%
CVSS Severity
CVSS v3 Score 6.1
References
- https://addons.prestashop.com/en/search-filters/18575-amazzing-filter.html
- https://medium.com/%40nasir.synack/uncovering-a-cross-site-scripting-vulnerability-cve-2023-48042-in-amazzing-filters-prestashop-2e4a9f8b655e
- https://addons.prestashop.com/en/search-filters/18575-amazzing-filter.html
- https://medium.com/%40nasir.synack/uncovering-a-cross-site-scripting-vulnerability-cve-2023-48042-in-amazzing-filters-prestashop-2e4a9f8b655e
Products affected by CVE-2023-48042
-
cpe:2.3:a:communitydeveloper:amazzing_filter:-
-
cpe:2.3:a:communitydeveloper:amazzing_filter:3.2.5