← Back

Contactform

contactform

Vendor: Prestashop • 1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2020-15178
1Prestashop
1Contactform
Jun 17, 2026
Sep 15, 2020
N/A· v4
9.3 CRITICAL· v3
4.3 MEDIUM· v2
In PrestaShop contactform module (prestashop/contactform) before version 4.3.0, an attacker is able to inject JavaScript while using the contact form. The `message` field was incorrectly unescaped, possibly allowing atta...Show more
In PrestaShop contactform module (prestashop/contactform) before version 4.3.0, an attacker is able to inject JavaScript while using the contact form. The `message` field was incorrectly unescaped, possibly allowing attackers to execute arbitrary JavaScript in a victim's browser.Show less