• caglararli@hotmail.com
  • 05386281520

CVE-2024-21628 | PrestaShop up to 8.1.2 Form isCleanHtml cross site scripting (GHSA-vr7m-r9vm-m4wf)

Çağlar Arlı      -    15 Views

CVE-2024-21628 | PrestaShop up to 8.1.2 Form isCleanHtml cross site scripting (GHSA-vr7m-r9vm-m4wf)

A vulnerability was found in PrestaShop up to 8.1.2. It has been classified as problematic. Affected is the function isCleanHtml of the component Form Handler. The manipulation leads to cross site scripting. This vulnerability is traded as CVE-2024-21628. It is possible to launch the attack remotely. There is no exploit available. It is recommended to upgrade the affected component.