Package Instance

HTTP 200 OK
Allow: GET, HEAD, OPTIONS
Content-Type: application/json
Vary: Accept

{
    "url": "http://public2.vulnerablecode.io/api/packages/57549?format=api",
    "purl": "pkg:composer/prestashop/prestashop@1.7.7%2B4",
    "type": "composer",
    "namespace": "prestashop",
    "name": "prestashop",
    "version": "1.7.7+4",
    "qualifiers": {},
    "subpath": "",
    "is_vulnerable": true,
    "next_non_vulnerable_version": "8.2.5",
    "latest_non_vulnerable_version": "9.1.1",
    "affected_by_vulnerabilities": [
        {
            "url": "http://public2.vulnerablecode.io/api/vulnerabilities/17594?format=api",
            "vulnerability_id": "VCID-qx7c-y2p8-vye9",
            "summary": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')\nA cross-site scripting (XSS) vulnerability in PrestaShop v1.7.7.4 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the message parameter in /contactform/contactform.php.",
            "references": [
                {
                    "reference_url": "https://github.com/mustgundogdu/Research/blob/main/PrestaShop/ReflectedXSS_1.7.7.4.md",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.1",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
                        },
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/mustgundogdu/Research/blob/main/PrestaShop/ReflectedXSS_1.7.7.4.md"
                },
                {
                    "reference_url": "https://github.com/PrestaShop/PrestaShop",
                    "reference_id": "",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.1",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
                        },
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/PrestaShop/PrestaShop"
                },
                {
                    "reference_url": "https://nvd.nist.gov/vuln/detail/CVE-2023-31508",
                    "reference_id": "CVE-2023-31508",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "6.1",
                            "scoring_system": "cvssv3.1",
                            "scoring_elements": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"
                        },
                        {
                            "value": "MODERATE",
                            "scoring_system": "generic_textual",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://nvd.nist.gov/vuln/detail/CVE-2023-31508"
                },
                {
                    "reference_url": "https://github.com/advisories/GHSA-6mhc-hqr3-w466",
                    "reference_id": "GHSA-6mhc-hqr3-w466",
                    "reference_type": "",
                    "scores": [
                        {
                            "value": "MODERATE",
                            "scoring_system": "cvssv3.1_qr",
                            "scoring_elements": ""
                        }
                    ],
                    "url": "https://github.com/advisories/GHSA-6mhc-hqr3-w466"
                }
            ],
            "fixed_packages": [
                {
                    "url": "http://public2.vulnerablecode.io/api/packages/272573?format=api",
                    "purl": "pkg:composer/prestashop/prestashop@1.7.7.5",
                    "is_vulnerable": true,
                    "affected_by_vulnerabilities": [
                        {
                            "vulnerability": "VCID-1trs-ajxn-jkhk"
                        },
                        {
                            "vulnerability": "VCID-22v3-9qr1-pyfg"
                        },
                        {
                            "vulnerability": "VCID-2kkx-8ucb-7ucj"
                        },
                        {
                            "vulnerability": "VCID-45hk-m7uv-zqfe"
                        },
                        {
                            "vulnerability": "VCID-7wj5-37ma-hbhg"
                        },
                        {
                            "vulnerability": "VCID-8beq-8rca-mbhd"
                        },
                        {
                            "vulnerability": "VCID-9n6p-8b89-63c6"
                        },
                        {
                            "vulnerability": "VCID-bmyy-gqbc-ybhz"
                        },
                        {
                            "vulnerability": "VCID-c4g5-t8vx-syax"
                        },
                        {
                            "vulnerability": "VCID-cf1h-m5xj-mfc5"
                        },
                        {
                            "vulnerability": "VCID-ey36-u4qn-gbge"
                        },
                        {
                            "vulnerability": "VCID-f4m9-pgg8-nqa3"
                        },
                        {
                            "vulnerability": "VCID-f7s4-16b7-zkcm"
                        },
                        {
                            "vulnerability": "VCID-fkcb-5u24-wqbg"
                        },
                        {
                            "vulnerability": "VCID-gggb-dges-qke1"
                        },
                        {
                            "vulnerability": "VCID-ghu1-c6e6-pudm"
                        },
                        {
                            "vulnerability": "VCID-htkt-tj6d-hydx"
                        },
                        {
                            "vulnerability": "VCID-keyj-v83x-nkck"
                        },
                        {
                            "vulnerability": "VCID-kwe1-5ukw-cbau"
                        },
                        {
                            "vulnerability": "VCID-mb3x-p2d7-gqdx"
                        },
                        {
                            "vulnerability": "VCID-s53g-k7gw-yyd4"
                        },
                        {
                            "vulnerability": "VCID-vcuy-9cdj-uyhz"
                        },
                        {
                            "vulnerability": "VCID-vsng-njkm-hydv"
                        }
                    ],
                    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.7.5"
                }
            ],
            "aliases": [
                "CVE-2023-31508",
                "GHSA-6mhc-hqr3-w466"
            ],
            "risk_score": 3.1,
            "exploitability": "0.5",
            "weighted_severity": "6.2",
            "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qx7c-y2p8-vye9"
        }
    ],
    "fixing_vulnerabilities": [],
    "risk_score": "3.1",
    "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/prestashop/prestashop@1.7.7%252B4"
}