CVE-2012-20001
PrestaShop before 1.5.2 allows XSS via the "<object data=’data:text/html" substring in the message field.
Source: CVE-2012-20001
CVE-2012-20001
PrestaShop before 1.5.2 allows XSS via the "<object data=’data:text/html" substring in the message field.
Source: CVE-2012-20001