Common-Services: >> So Flexibilite Security Vulnerabilities
An issue was discovered in Common-Services "So Flexibilite" (soflexibilite) module for PrestaShop before version 4.1.26, allows remote attackers to escalate privileges and obtain sensitive information via debug file.
CVSS Score
7.5
EPSS Score
0.001
Published
2024-03-03
In the module "So Flexibilite" (soflexibilite) from Common-Services for PrestaShop < 4.1.26, a guest (authenticated customer) can perform Cross Site Scripting (XSS) injection.
CVSS Score
5.9
EPSS Score
0.001
Published
2024-02-27