{ "canonical_id": "prestashop--CVE-2013-4792", "system_id": "prestashop", "display_name": "PrestaShop", "category": "ecommerce", "advisory_mode": "core", "title": "CVE-2013-4792", "summary": "PrestaShop before 1.4.11 allows logout CSRF.", "published_at": "2020-02-14T00:15:10.857", "updated_at": "2024-11-21T01:56:25.330", "severity": "medium", "cvss_score": 5.5, "exploit_status": "unknown", "source_confidence": "official", "official_source_url": "http://davidsopaslabs.blogspot.com/2013/07/prestashop-persistent-xss-and-csrf.html", "secondary_source_urls": [], "aliases": [ "CVE-2013-4792" ], "cve_ids": [ "CVE-2013-4792" ], "ghsa_ids": [], "osv_ids": [], "affected_versions": [], "fixed_versions": [], "package_name": null, "render_markdown": false, "case_path": null, "secure_code_topics": [ "plugin-extension-trust-policy", "authz-server-side-recheck", "file-upload-validation" ], "status": "triage", "triage_reasons": [ "missing affected/fixed version details" ], "verification_status": "triage-manual", "verification_mode": "synthetic", "last_verified_at": null, "last_run_id": null, "evidence_bundle": null, "historical_status": null, "latest_status": null, "browser_evidence": { "required": false, "present": false, "refs": [] }, "repro_profile_id": "plugin-extension-generic", "artifact_mode": "official-image", "blocked_reason": null, "metadata": { "source_names": [ "NVD PrestaShop" ], "source_kinds": [ "nvd-search" ], "candidate_count": 1 } }