GitHub Advisoryadvisory · Packagist

GHSA-vr7m-r9vm-m4wf PrestaShop XSS can be stored in DB from "add a message form" in order detail page (FO)

MEDIUM Published 2024-01-03 Modified 2024-01-03 Official page ↗
Aliases
CVE-2024-21628
Ecosystem
Packagist
Packages
prestashop/prestashop
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:L
Weaknesses
CWE-79
Reviewed
2024-01-03

Affected packages

• Packagist prestashop/prestashop: < 8.1.3 → fixed in 8.1.3

Description

Impact The isCleanHtml method is not used on this this form, which makes it possible to store an xss in DB. The impact is low because the html is not interpreted in BO, thanks to twig's escape mechanism. In FO, the xss is effective, but only impacts the customer sending it, or the customer session from which it was sent. Be careful if you have a module fetching these messages from the DB and displaying it without escaping html. Patches 8.1.x Reporter Reported by Rona Febriana (linkedin: https://www.linkedin.com/in/rona-febriana/)

Related

Alias · CVE (1)

  • CVE-2024-21628 PrestaShop is an open-source e-commerce platform. vulnerability

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References