In PrestaShop between versions 1.7.6.1 and 1.7.6.5, there is a reflected XSS on AdminAttributesGroups page. The problem is patched in 1.7.6.5.
{
"extracted_events": [
{
"introduced": "0"
},
{
"fixed": "1.7.6.5"
}
],
"cpe": "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*",
"source": [
"CPE_RANGE",
"REFERENCES"
]
}