VULNERABILITY INTELLIGENCE

CVE-2020-5277

CVSS score5.4 MEDIUM

EPSS probability0.70%

CISA KEVNot currently listed

Published2020-03-25

Last modified2026-06-17

Description

PrestaShop module ps_facetedsearch versions before 3.5.0 has a reflected XSS with `url_name` parameter. The problem is fixed in 3.5.0