https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-19T21:55:09.401769+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-242767 EUVD-2026-242767 2026-10-19T21:55:09.405470+00:00 EUVD-2026-242767 https://cve.radiocsirt.org/vuln/fkie_cve-2024-21627 fkie_cve-2024-21627 2026-10-19T21:55:09.405518+00:00

PrestaShop is an open-source e-commerce platform. Prior to versions 8.1.3 and 1.7.8.11, some event attributes are not detected by the `isCleanHTML` method. Some modules using the `isCleanHTML` method could be vulnerable to cross-site scripting. Versions 8.1.3 and 1.7.8.11 contain a patch for this issue. The best workaround is to use the `HTMLPurifier` library to sanitize html input coming from users. The library is already available as a dependency in the PrestaShop project. Beware though that in legacy object models, fields of `HTML` type will call `isCleanHTML`.

 https://cve.radiocsirt.org/vuln/ghsa-xgpm-q3mq-46rq GHSA-xgpm-q3mq-46rq — PrestaShop some attribute not escaped in Validate::isCleanHTML method 2026-10-19T21:55:09.405568+00:00

Affected: Packagist: prestashop/prestashop

### Description Some event attributes are not detected by the isCleanHTML method

### Impact Some modules using the isCleanHTML method could be vulnerable to xss

### Patches 8.1.3, 1.7.8.11

### Workarounds The best workaround is to use the `HTMLPurifier` library to sanitize html input coming from users. The library is already available as a dependency in the PrestaShop project. Beware though that in legacy object models, fields of `HTML` type will call `isCleanHTML`.

### Reporters

Reported by Antonio Russo (@Antonio-R1 on GitHub) and Antonio Rocco Spataro (@antoniospataro on GitHub).

 https://cve.radiocsirt.org/vuln/gsd-2024-21627 gsd-2024-21627 2026-10-19T21:55:09.405602+00:00 gsd-2024-21627