GCVE - cpe:2.3:a:prestashop:ps_emailsubscription:*:*:*:*:*:prestashop:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:prestashop:ps_emailsubscription:*:*:*:*:*:prestashop:*:*

part: a version: * update: *

Vendor	Prestashop (`236a7260-6e18-5f0f-b33a-a013be210d8c`)
Product	Ps Emailsubscription (`5df8fcd7-26cc-5cd2-bb90-b0f6208c994a`)
Edition	*
Language	*
Software edition	*
Target software	prestashop
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2021-21418`	vulnerable	2026-06-03 14:43:44.701795	Potential XSS injection in the newsletter conditions field MEDIUM (4.6) ps_emailsubscription is a newsletter subscription module for the PrestaShop platform. An employee can inject javascript in the newsletter condition field that will then be executed on the front office The issue has been fixed in 2.6.1 Published: 2021-03-31T17:35:15.000Z Updated: 2024-08-03T18:09:16.081Z Open on db.gcve.eu Reference links https://github.com/PrestaShop/ps_emailsubscription/security/advisories/GHSA-vwfx-hh3w-fj99 https://github.com/PrestaShop/ps_emailsubscription/commit/664ffb225e2afb4a32640bbedad667dc6e660b70 https://github.com/PrestaShop/ps_emailsubscription/releases/tag/v2.6.1 https://packagist.org/packages/prestashop/ps_emailsubscription	Imported from gcve-enriched-dumps CVE data

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.