CVE-2020-5277: Prestashop Faceted Search Module

Medium severity, CVSS 5.4. EPSS: 0.7% chance of exploitation in the next 30 days.

PrestaShop module ps_facetedsearch versions before 3.5.0 has a reflected XSS with `url_name` parameter. The problem is fixed in 3.5.0

Affected products

• Prestashop Faceted Search Module: after 1.0.0, before 3.5.0 (fixed in 3.5.0)

Published 2020-03-25. Last modified 2026-06-17.