Description
In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is a reflected XSS on Search page with `alias` and `search` parameters. The problem is patched in 1.7.6.5
Remediation
References
Related Vulnerabilities
Liferay Portal Insufficiently Protected Credentials Vulnerability (CVE-2021-29043)
Oracle JRE CVE-2013-0445 Vulnerability (CVE-2013-0445)
WordPress Plugin LifterLMS-WP LMS for eLearning, Online Courses, & Quizzes SQL Injection (7.6.2)
MongoDb Improper Input Validation Vulnerability (CVE-2018-25004)
WordPress Plugin WooCommerce Weight Based Shipping Cross-Site Request Forgery (5.4.1)