CVE-2020-5266: Prestashop Link

Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days.

In the ps_link module for PrestaShop before version 3.1.0, there is a stored XSS when you create or edit a link list block with the title field. The problem is fixed in 3.1.0

Affected products

• Prestashop Prestashop Link: from 1.0.4, before 3.1.0 (fixed in 3.1.0)

Published 2020-04-16. Last modified 2026-06-17.