Lucene search
GoogleOSV:GHSA-58W4-W77W-QV3WHistoryNov 16, 2020 - 9:23 p.m.
Reflected XSS with parameters in PostComment
2020-11-1621:23:29
Google
osv.dev
10
reflected xss
postcomment
attacker injection
malicious link
patch 4.2.0
EPSS
0.001
Percentile
29.3%
Impact
An attacker could inject malicious web code into the users’ web browsers by creating a malicious link.
Patches
The problem is fixed in 4.2.0
References
Related
osv
osv
CVE-2020-26225
2020-11-16 22:15:12
github
github
Reflected XSS with parameters in PostComment
2020-11-16 21:23:29
prion
prion
Design/Logic Flaw
2020-11-16 22:15:00
veracode
veracode
Cross-Site Scripting (XSS)
2020-11-17 05:16:58
Cross-site Scripting (XSS)
2020-11-18 05:30:21
cvelist
cvelist
CVE-2020-26225 Reflected XSS in PrestaShop Product Comments
2020-11-16 21:35:13
cve
cve
CVE-2020-26225
2020-11-16 22:15:12
nvd
nvd
CVE-2020-26225
2020-11-16 22:15:12