medium4.8
CVE-2020-21967
File upload vulnerability in the Catalog feature in Prestashop 1.7.6.7 allows remote attackers to run arbitrary code via the add new file page.
Impact
File upload vulnerability in the Catalog feature in Prestashop 1.7.6.7 allows remote attackers to run arbitrary code via the add new file page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Prestashop | Prestashop | Version 1.7.6.7 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/167742/PrestaShop-1.7.6.7-Cross-Site-Scripting.html
- https://github.com/PrestaShop/PrestaShop/issues/20306
- http://packetstormsecurity.com/files/167742/PrestaShop-1.7.6.7-Cross-Site-Scripting.html
- https://github.com/PrestaShop/PrestaShop/issues/20306