Description
In PrestaShop between versions 1.7.1.0 and 1.7.6.5, there is a reflected XSS on AdminCarts page with `cartBox` parameter The problem is fixed in 1.7.6.5
Remediation
References
Related Vulnerabilities
Roundcube Unspesificed Vulnerability (CVE-2018-9846)
Oracle HTTP Server Out-of-bounds Read Vulnerability (CVE-2020-26185)
RubyGems Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2017-0899)
WordPress Plugin SB Welcome Email Editor Unspecified Vulnerability (4.1)
WordPress Plugin DirectoryPress-Business Directory And Classified Ad Listing SQL Injection (3.6.10)