CVE-2019-11876

In PrestaShop 1.7.5.2, the shop_country parameter in the install/index.php installation script/component is affected by Reflected XSS

published May 24, 2019

CVSS
—
EPSS
1%
Percentile
59.0
In the wild
Unconfirmed
What it is

In PrestaShop 1.7.5.2, the shop_country parameter in the install/index.php installation script/component is affected by Reflected XSS. Exploitation by a malicious actor requires the user to follow the initial stages of the setup (accepting terms and conditions) before executing the malicious link.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00892 · 59.0th percentile
Published
2019-05-24T15:48Z
EPSS history
Timeline
  • 24 MAY 15:48Z
    In PrestaShop 1.7.5.2, the shop_country parameter in the install/index.php installation script/component is affected by Reflected XSS
    cvelistv5