CVE-2022-35933 — PrestaShop module Product Comments vulnerable to cross-site scripting (XSS)
This package is a PrestaShop module that allows users to post reviews and rate products. There is a vulnerability where the attacker could steal an administrator's cookie. The i…
Published: 2022-09-02 · CVSS: 4.3 · CVSS 3.0
This package is a PrestaShop module that allows users to post reviews and rate products. There is a vulnerability where the attacker could steal an administrator's cookie. The issue is fixed in version 5.0.2.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7