Back to Database
Status published
Medium
CVE-2020-5265
Reflected XSS on AdminAttributesGroups page of PrestaShop
Vulnerability Description
In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminAttributesGroups page. The problem is patched in 1.7.6.5.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2020-5265
Credits & Attribution
No credits recorded in the NVD database.
References
More from PrestaShop
View All →CVE-2025-24027
ps_contactinfo has potential XSS due to usage of the nofilter tag in template
Medium
6.2
CVE-2024-34717
Anonymous PrestaShop customer can download other customers' invoices
Medium
5.3
CVE-2024-34716
PrestaShop vulnerable to XSS via customer contact form in FO, through file upload
Critical
9.7
CVE-2024-26129
Prestashop vulnerable to path disclosure in JavaScript variable
Medium
5.8
CVE-2024-21628
XSS can be stored in DB from "add a message form" in order detail page (FO)
Medium
5.4
Affected Vendor
PrestaShop
View all reports →Affected Software
PrestaShop
Vulnerable Versions:
>= 1.7.6.1, < 1.7.6.5
Timeline
Official Publish:
April 20th, 2020
Last Modified:
August 4th, 2024
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:C/C:L/I:L/A:N