CVE-2023-39527 (published 2023-08-07T20:32:45.203Z)
PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to cross-site scripting through the `isCleanHTML` method. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.
Affected products: Vendor: PrestaShop
Product: PrestaShop
Versions: < 1.7.8.10, >= 8.0.0, < 8.0.5, = 8.1.0