medium5.4
CVE-2013-4791
PrestaShop Stored Cross-Site Scripting Vulnerability
Impact
PrestaShop before 1.4.11 allows Logistician, translators and other low level profiles/accounts to inject a persistent XSS vector on TinyMCE.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | prestashop/prestashop | < 1.4.11 | 1.4.11 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Prestashop | Prestashop | before 1.4.11 |