Vulnerability identifier: #VU44477

Vulnerability risk: Low

CVSSv3.1: 4.8 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N/E:P/RL:O/RC:C]

CVE-ID: CVE-2011-4544

CWE-ID: CWE-79

Exploitation vector: Network

Exploits in database: 4

• August 11, 2020
  • PrestaShop 1.4.4.1 - /admin/ajaxfilemanager/ajax_save_text.php Multiple Parameter Cross-Site Scripting [Exploit-DB]
  • PrestaShop 1.4.4.1 - /modules/mondialrelay/kit_mondialrelay/SuiviExpedition_ajax.php Expedition Parameter Cross-Site Scripting [Exploit-DB]
  • PrestaShop 1.4.4.1 - modules/mondialrelay/googlemap.php Multiple Parameter Cross-Site Scripting [Exploit-DB]
  • PrestaShop 1.4.4.1 mondialrelay (kit_mondialrelay) - Multiple Parameter Cross-Site Scripting [Exploit-DB]

Impact: Data manipulation

Vulnerable software:
PrestaShop
Web applications / E-Commerce systems

Vendor: PrestaShop SA