CVE-2011-4544

This exploit demonstrates a stored XSS vulnerability in PrestaShop's Mondial Relay module by injecting a malicious script via the 'num_mode' POST parameter. The vulnerability arises due to insufficient input sanitization, allowing arbitrary JavaScript execution in the context of the affected site.

This exploit demonstrates a cross-site scripting (XSS) vulnerability in PrestaShop's Mondial Relay module. The vulnerability allows arbitrary script execution via unsanitized input in the 'Expedition' POST parameter.

This exploit demonstrates multiple XSS vulnerabilities in PrestaShop's mondialrelay module by injecting malicious JavaScript via unsanitized input parameters. The PoC provides direct URLs to trigger the vulnerabilities.

This exploit demonstrates a stored XSS vulnerability in PrestaShop's ajax_save_text.php by injecting malicious scripts via the 'folder' and 'name' parameters. The vulnerability arises due to insufficient input sanitization, allowing arbitrary JavaScript execution in the context of the affected site.