CVE-2026-38725 | PrestaShop Xipblog Plugin up to 2.0.1 Comment Rendering ajax.php name/content cross site scripting

August 28, 2026 Yanac

A vulnerability classified as problematic was found in PrestaShop Xipblog Plugin up to 2.0.1. The affected element is an unknown function of the file ajax.php of the component Comment Rendering. The manipulation of the argument name/content results in cross site scripting.

This vulnerability is reported as CVE-2026-38725. The attack can be launched remotely. No exploit exists.VulDB Recent EntriesRead More