CVE-2020-26225: Prestashop Product Comments

Medium severity, CVSS 6.1. EPSS: 0.9% chance of exploitation in the next 30 days.

In PrestaShop Product Comments before version 4.2.0, an attacker could inject malicious web code into the users' web browsers by creating a malicious link. The problem was introduced in version 4.0.0 and is fixed in 4.2.0

Affected products

• Prestashop Product Comments: from 4.0.0, before 4.2.0 (fixed in 4.2.0)

Published 2020-11-16. Last modified 2026-06-17.