Security Advisory
CVE-2012-20001
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
PrestaShop before 1.5.2 allows XSS via the "<object data='data:text/html" substring in the message field.
CVE vulnerability detail - eXtreme Datacenter Security Operations
PrestaShop before 1.5.2 allows XSS via the "<object data='data:text/html" substring in the message field.