CVE-2023-39527

PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to cross-site scripting through the `isCleanHTML` method. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.

Affected products

Prestashop

Prestashop

< 1.7.8.10, 8.0.5, 8.1.0

Fix

Available

CVSS 3.1

8.3 HIGH

EPSS

0.5% (42th percentile)

Weakness

CWE-79, CWE-116

NVD status

Modified

Published

2023-08-07