VULNERABILITY INTELLIGENCE

CVE-2020-15161

CVSS score6.1 MEDIUM

EPSS probability0.93%

CISA KEVNot currently listed

Published2020-09-24

Last modified2026-06-17

Description

In PrestaShop from version 1.6.0.4 and before version 1.7.6.8 an attacker is able to inject javascript while using the contact form. The problem is fixed in 1.7.6.8