Django REST framework

Vulnerability Instance

Lookup for vulnerabilities affecting packages.

Vulnerability_idVCID-a64t-8vft-pkf4
Summary
Cross-site Scripting
In PrestaShop, the `shop_country` parameter in the `install/index.Exploitation by a malicious actor requires the user to follow the initial stages of the setup (accepting terms and conditions) before executing the malicious link.
Aliases
0
alias CVE-2019-11876
1
alias GHSA-6grv-hw8g-4gfm
Fixed_packages
0
url pkg:composer/drupal/core@8.7.1
purl pkg:composer/drupal/core@8.7.1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2c5f-q858-huaw
1
vulnerability VCID-2fas-m6vh-myhc
2
vulnerability VCID-2t34-82p3-73c3
3
vulnerability VCID-31qy-vagp-83b6
4
vulnerability VCID-3pj1-y73r-vyhh
5
vulnerability VCID-3xk4-qwaq-5yaj
6
vulnerability VCID-4p4c-7rdc-37fa
7
vulnerability VCID-4q59-j6u4-qfhk
8
vulnerability VCID-54qh-fz2a-cyh6
9
vulnerability VCID-5jy9-mhbb-nuh7
10
vulnerability VCID-67w7-gq9f-ukf1
11
vulnerability VCID-6s93-1cpz-yyg8
12
vulnerability VCID-7v89-2sss-hfaz
13
vulnerability VCID-a3s2-c4k2-4ufn
14
vulnerability VCID-a7ss-tkb6-gkge
15
vulnerability VCID-ard5-3cjv-1beu
16
vulnerability VCID-avmn-kqky-83dd
17
vulnerability VCID-b8fw-ya7y-h7d8
18
vulnerability VCID-ckvk-xm4a-2qey
19
vulnerability VCID-dav9-pgdh-8yey
20
vulnerability VCID-deks-ns51-nbdg
21
vulnerability VCID-dyhz-g3nv-yuc3
22
vulnerability VCID-egtv-y9w1-skgr
23
vulnerability VCID-hay8-hvsq-33bm
24
vulnerability VCID-hkch-a5yn-jyg1
25
vulnerability VCID-j7bj-atys-qfg3
26
vulnerability VCID-jed8-4cv5-6bcr
27
vulnerability VCID-kzrs-mrga-nyej
28
vulnerability VCID-nacy-y1qt-5yhb
29
vulnerability VCID-p54u-b18k-jyft
30
vulnerability VCID-pzp5-2bpz-jfe2
31
vulnerability VCID-rd4g-h1j9-23cb
32
vulnerability VCID-t89y-c9hq-9bhk
33
vulnerability VCID-tp81-dw6e-9qah
34
vulnerability VCID-tpzm-u3qp-akc8
35
vulnerability VCID-uq9s-79g7-rqh6
36
vulnerability VCID-vjrr-h9sh-3bcu
37
vulnerability VCID-wsv7-je8g-sqet
38
vulnerability VCID-yq4q-hydz-vuga
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.7.1
1
url pkg:composer/prestashop/prestashop@1.7.6.0
purl pkg:composer/prestashop/prestashop@1.7.6.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2xfu-j7d5-8yac
1
vulnerability VCID-43ms-4qdh-27hr
2
vulnerability VCID-4d5m-3wus-67ea
3
vulnerability VCID-5k6w-k1rk-gubu
4
vulnerability VCID-5q7s-b6dq-uucs
5
vulnerability VCID-8977-5v2u-tkb8
6
vulnerability VCID-aw6u-kjvj-4ufn
7
vulnerability VCID-bzz3-7bg4-5kex
8
vulnerability VCID-ccrx-vaaf-tkhj
9
vulnerability VCID-cgav-5xyb-w3fr
10
vulnerability VCID-dq27-u9hx-dqbr
11
vulnerability VCID-dwbh-pjyu-rufu
12
vulnerability VCID-fh1x-tevj-57cs
13
vulnerability VCID-ftgu-buc5-wubt
14
vulnerability VCID-gc7m-sv4y-rkfu
15
vulnerability VCID-m2ef-cfzv-jub2
16
vulnerability VCID-q2q6-1rr4-kfb7
17
vulnerability VCID-quj5-46gp-j7eu
18
vulnerability VCID-rahg-9gg1-8ff2
19
vulnerability VCID-rh1t-49x9-yfca
20
vulnerability VCID-vbua-491z-47ba
21
vulnerability VCID-wa18-pp9j-pyd7
22
vulnerability VCID-wjqt-186d-9kch
23
vulnerability VCID-yabu-aqpw-dbay
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.6.0
Affected_packages
0
url pkg:composer/drupal/core@8.7.0
purl pkg:composer/drupal/core@8.7.0
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2c5f-q858-huaw
1
vulnerability VCID-2fas-m6vh-myhc
2
vulnerability VCID-2t34-82p3-73c3
3
vulnerability VCID-31qy-vagp-83b6
4
vulnerability VCID-3pj1-y73r-vyhh
5
vulnerability VCID-3xk4-qwaq-5yaj
6
vulnerability VCID-4p4c-7rdc-37fa
7
vulnerability VCID-4q59-j6u4-qfhk
8
vulnerability VCID-54qh-fz2a-cyh6
9
vulnerability VCID-5jy9-mhbb-nuh7
10
vulnerability VCID-67w7-gq9f-ukf1
11
vulnerability VCID-6s93-1cpz-yyg8
12
vulnerability VCID-7v89-2sss-hfaz
13
vulnerability VCID-a3s2-c4k2-4ufn
14
vulnerability VCID-a64t-8vft-pkf4
15
vulnerability VCID-a7ss-tkb6-gkge
16
vulnerability VCID-ard5-3cjv-1beu
17
vulnerability VCID-avmn-kqky-83dd
18
vulnerability VCID-b8fw-ya7y-h7d8
19
vulnerability VCID-ckvk-xm4a-2qey
20
vulnerability VCID-dav9-pgdh-8yey
21
vulnerability VCID-deks-ns51-nbdg
22
vulnerability VCID-dyhz-g3nv-yuc3
23
vulnerability VCID-egtv-y9w1-skgr
24
vulnerability VCID-hay8-hvsq-33bm
25
vulnerability VCID-hkch-a5yn-jyg1
26
vulnerability VCID-j7bj-atys-qfg3
27
vulnerability VCID-jed8-4cv5-6bcr
28
vulnerability VCID-kzrs-mrga-nyej
29
vulnerability VCID-nacy-y1qt-5yhb
30
vulnerability VCID-p54u-b18k-jyft
31
vulnerability VCID-pzp5-2bpz-jfe2
32
vulnerability VCID-rd4g-h1j9-23cb
33
vulnerability VCID-t89y-c9hq-9bhk
34
vulnerability VCID-tp81-dw6e-9qah
35
vulnerability VCID-tpzm-u3qp-akc8
36
vulnerability VCID-uq9s-79g7-rqh6
37
vulnerability VCID-vjrr-h9sh-3bcu
38
vulnerability VCID-wsv7-je8g-sqet
39
vulnerability VCID-wszp-2es5-z7fy
40
vulnerability VCID-yq4q-hydz-vuga
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/drupal/core@8.7.0
1
url pkg:composer/prestashop/prestashop@1.7.5%2B2
purl pkg:composer/prestashop/prestashop@1.7.5%2B2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-a64t-8vft-pkf4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.5%252B2
2
url pkg:composer/prestashop/prestashop@1.7.5.2
purl pkg:composer/prestashop/prestashop@1.7.5.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-2xfu-j7d5-8yac
1
vulnerability VCID-43ms-4qdh-27hr
2
vulnerability VCID-4d5m-3wus-67ea
3
vulnerability VCID-5k6w-k1rk-gubu
4
vulnerability VCID-5q7s-b6dq-uucs
5
vulnerability VCID-8977-5v2u-tkb8
6
vulnerability VCID-a64t-8vft-pkf4
7
vulnerability VCID-aw6u-kjvj-4ufn
8
vulnerability VCID-bzz3-7bg4-5kex
9
vulnerability VCID-ccrx-vaaf-tkhj
10
vulnerability VCID-cgav-5xyb-w3fr
11
vulnerability VCID-dq27-u9hx-dqbr
12
vulnerability VCID-dwbh-pjyu-rufu
13
vulnerability VCID-fh1x-tevj-57cs
14
vulnerability VCID-ftgu-buc5-wubt
15
vulnerability VCID-gc7m-sv4y-rkfu
16
vulnerability VCID-m2ef-cfzv-jub2
17
vulnerability VCID-q2q6-1rr4-kfb7
18
vulnerability VCID-quj5-46gp-j7eu
19
vulnerability VCID-rahg-9gg1-8ff2
20
vulnerability VCID-rh1t-49x9-yfca
21
vulnerability VCID-vbua-491z-47ba
22
vulnerability VCID-wa18-pp9j-pyd7
23
vulnerability VCID-wjqt-186d-9kch
24
vulnerability VCID-yabu-aqpw-dbay
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.5.2
References
0
reference_url https://api.first.org/data/v1/epss?cve=CVE-2019-11876
reference_id
reference_type
scores
0
value 0.00212
scoring_system epss
scoring_elements 0.43689
published_at 2026-06-04T12:55:00Z
1
value 0.00212
scoring_system epss
scoring_elements 0.43769
published_at 2026-06-06T12:55:00Z
2
value 0.00212
scoring_system epss
scoring_elements 0.43759
published_at 2026-06-05T12:55:00Z
url https://api.first.org/data/v1/epss?cve=CVE-2019-11876
1
reference_url https://github.com/PrestaShop/PrestaShop
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/PrestaShop/PrestaShop
2
reference_url https://www.logicallysecure.com/blog/xss-presta-xss-drupal
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.logicallysecure.com/blog/xss-presta-xss-drupal
3
reference_url https://www.logicallysecure.com/blog/xss-presta-xss-drupal/
reference_id
reference_type
scores
url https://www.logicallysecure.com/blog/xss-presta-xss-drupal/
4
reference_url https://www.prestashop.com/forums/forum/2-prestashop-news-and-releases
reference_id
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://www.prestashop.com/forums/forum/2-prestashop-news-and-releases
5
reference_url https://www.prestashop.com/forums/forum/2-prestashop-news-and-releases/
reference_id
reference_type
scores
url https://www.prestashop.com/forums/forum/2-prestashop-news-and-releases/
6
reference_url https://nvd.nist.gov/vuln/detail/CVE-2019-11876
reference_id CVE-2019-11876
reference_type
scores
0
value 6.1
scoring_system cvssv3.1
scoring_elements CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
1
value MODERATE
scoring_system generic_textual
scoring_elements
url https://nvd.nist.gov/vuln/detail/CVE-2019-11876
7
reference_url https://github.com/advisories/GHSA-6grv-hw8g-4gfm
reference_id GHSA-6grv-hw8g-4gfm
reference_type
scores
url https://github.com/advisories/GHSA-6grv-hw8g-4gfm
Weaknesses
0
cwe_id 1035
name OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017.
1
cwe_id 79
name Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
description The product does not neutralize or incorrectly neutralizes user-controllable input before it is placed in output that is used as a web page that is served to other users.
2
cwe_id 937
name OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities
description Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013.
Exploits
Severity_range_score4.0 - 6.9
Exploitability0.5
Weighted_severity6.2
Risk_score3.1
Resource_urlhttp://public2.vulnerablecode.io/vulnerabilities/VCID-a64t-8vft-pkf4