CVE-2022-35933

This package is a PrestaShop module that allows users to post reviews and rate products. There is a vulnerability where the attacker could steal an administrator's cookie. The issue is fixed in version 5.0.2.

Score

CVSS 3.1 6.1 Medium

Status

Modified - security-advisories@github.com

Published

2022-09-02

Last modified

2025-04-23

Weaknesses

CWE-79

Affected products

• Productcomments (Prestashop)

References

• https://github.com/PrestaShop/productcomments/commit/314456d739155aa71f0b235827e8e0f24b97c26b
• https://github.com/PrestaShop/productcomments/security/advisories/GHSA-prrh-qvhf-x788