CVE:CVE-2011-4544
CNNVD:CNNVD-201112-002
Prestashop 1.5之前版本中存在多个跨站脚本攻击漏洞。远程攻击者可借助(1) address(2) relativ_base_dir(3) relativ_base_dir, (4) Pays, (5) Ville, (6) CP, (7) Poids, (8) Action, or (9) num（10）num_mode（11）Expedition(12) folder或者(13) name注入任意web脚本或者HTML。
solution:Upgrade prestashop prestashop to a higher version than 1.4.0.6,0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.5.1,0.9,0.9.1:rc1,0.9.1:rc2,0.9.2,0.9.5,0.9.6,0.9.7,1.0,1.0.0.1,1.0.0.2,1.0.0.3,1.0.0.4,1.0.0.5,1.1.0.3,1.4,and avoid the version (,1.4.0.6],0.8.1,0.8.2,0.8.3,0.8.4,0.8.5,0.8.5.1,0.9,0.9.1:rc1,0.9.1:rc2,0.9.2,0.9.5,0.9.6,0.9.7,1.0,1.0.0.1,1.0.0.2,1.0.0.3,1.0.0.4,1.0.0.5,1.1.0.3,1.4