Skip to main content
cve.nowby Sazabi
← Packagist
PackagistPackage

prestashop/productcomments

3 known vulnerabilities (1 high, 2 medium), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
3 · 1 high, 2 medium
Registry
Packagist

Advisories 3

  • CVE-2022-35933Medium 4.3

    PrestaShop module Product Comments vulnerable to cross-site scripting (XSS)

    Affected: fixed in 5.0.2.

  • CVE-2020-26248Medium 6.8

    Blind SQL injection during the CommentGrade process

    Affected: from 4.0.0, fixed in 4.2.1.

  • Reflected XSS in PrestaShop Product Comments

    Affected: from 4.0.0, fixed in 4.2.0.