{"id":"GHSA-cx2r-mf6x-55rx","aliases":["CVE-2020-5273"],"title":"Stored XSS with custom URLs in PrestaShop module ps_linklist","titleSource":"OSV","descriptionSource":"OSV","declaredSeverity":"MODERATE","description":"### Impact\nStored XSS when using custom URLs.\n\n### Patches\nThe problem is fixed in 3.1.0\n\n### References\n[Cross-site Scripting (XSS) - Stored (CWE-79)](https://cwe.mitre.org/data/definitions/79.html)","severity":"medium","score":4.1,"published":"2021-10-12T16:01:36.000Z","modified":"2026-07-08T06:00:44.803Z","withdrawn":false,"knownExploited":false,"affected":[{"ecosystem":"Packagist","name":"prestashop/ps_linklist","sources":[{"name":"OSV · GHSA-cx2r-mf6x-55rx","url":"https://osv.dev/vulnerability/GHSA-cx2r-mf6x-55rx"}],"ranges":[{"events":[{"introduced":"0"},{"fixed":"3.1.0"}],"type":"ECOSYSTEM"}],"versions":["3.0.2","3.0.3","3.0.4","v1.0.4","v1.1.0","v1.2.0","v2.0.0","v2.0.1","v2.1.0","v2.1.1","v2.1.2","v2.1.3","v2.1.4","v2.1.5","v2.1.6","v3.0.0","v3.0.1"],"fixed":["3.1.0"]}],"sourceAffected":[],"references":["https://github.com/PrestaShop/ps_linklist/security/advisories/GHSA-cx2r-mf6x-55rx","https://nvd.nist.gov/vuln/detail/CVE-2020-5273","https://github.com/PrestaShop/ps_linklist/commit/83e6e0bdda2287f4d6e64127cb90c41d26b5ad82","https://github.com/PrestaShop/ps_linklist"],"sources":[{"name":"OSV","id":"GHSA-cx2r-mf6x-55rx","modified":"2026-07-08T06:00:44.803963784Z","url":"https://osv.dev/vulnerability/GHSA-cx2r-mf6x-55rx"}],"assessments":[{"source":"OSV","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N","score":4.1}],"products":[],"remediation":[],"kev":{"status":"not-listed","checkedAt":"2026-10-28T21:15:31.530Z"},"coverage":[{"source":"NVD","status":"not-checked"},{"source":"GHSA","status":"not-checked"},{"source":"EUVD","status":"not-checked"},{"source":"EPSS","status":"not-checked"}],"evidence":[]}