In PrestaShop between versions 1.5.5.0 and 1.7.6.5, there is a reflected XSS on Search page with `alias` and `search` parameters. The problem is patched in 1.7.6.5
No PoCs from references.
- https://github.com/Al1ex/WindowsElevation
- https://github.com/fei9747/WindowsElevation