← Database

CVE-2022-35933

MEDIUM CVSS: 6.1 Published: 2022-09-02 Modified: 2026-06-17

Description

This package is a PrestaShop module that allows users to post reviews and rate products. There is a vulnerability where the attacker could steal an administrator's cookie. The issue is fixed in version 5.0.2.

Affected Platforms

Prestashop Productcomments

Weakness Type

CWE-79, CWE-79

References