{"metadata": {"vulnerability": "CVE-2024-21628", "count": 23, "kinds": {"milestone": 6, "sighting": 3, "kev": 0, "other": 14}}, "data": [{"timestamp": "2023-12-29T03:00:44.954Z", "date_only": false, "value": "2023-12-29T03:00:44.954Z", "kind": "milestone", "label": "Reserved", "source": "cvelistv5", "record": "CVE-2024-21628", "field": "cveMetadata.dateReserved"}, {"timestamp": "2023-12-29T06:02:04.980Z", "date_only": false, "value": "2023-12-29T06:02:04.980639Z", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-21628", "record": "GSD-2024-21628", "field": "gsd.osvSchema.modified"}, {"timestamp": "2024-01-02T21:17:14.733Z", "date_only": false, "value": "2024-01-02T21:17:14.733Z", "kind": "milestone", "label": "Published", "source": "cvelistv5", "record": "CVE-2024-21628", "field": "cveMetadata.datePublished"}, {"timestamp": "2024-01-02T21:17:14.733Z", "date_only": false, "value": "2024-01-02T21:17:14.733Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / GitHub_M", "record": "CVE-2024-21628", "field": "containers.cna.providerMetadata.dateUpdated"}, {"timestamp": "2024-01-02T22:15:09Z", "date_only": false, "value": "2024-01-02T22:15:09Z", "kind": "other", "label": "Nvd published at", "source": "github \u00b7 GHSA-VR7M-R9VM-M4WF", "record": "GHSA-VR7M-R9VM-M4WF", "field": "database_specific.nvd_published_at"}, {"timestamp": "2024-01-02T22:15:09.687Z", "date_only": false, "value": "2024-01-02T22:15:09.687", "kind": "milestone", "label": "Published", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21628", "record": "FKIE_CVE-2024-21628", "field": "published"}, {"timestamp": "2024-01-02T22:15:09.687Z", "date_only": false, "value": "2024-01-02T22:15:09.687", "kind": "milestone", "label": "Published", "source": "gsd \u00b7 GSD-2024-21628", "record": "GSD-2024-21628", "field": "namespaces.nvd.nist.gov.cve.published"}, {"timestamp": "2024-01-02T23:26:56Z", "date_only": false, "value": "2024-01-02T23:26:56.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/162095", "record": "CVE-2024-21628", "field": "creation_timestamp", "uuid": "9b917a6c-2ae5-4088-a36f-19824abc439b", "content": "https://ift.tt/42t6oaG\nCVE-2024-21628", "url": "https://t.me/ctinow/162095"}, {"timestamp": "2024-01-03T01:38:17Z", "date_only": false, "value": "2024-01-03T01:38:17.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/cibsecurity/74213", "record": "CVE-2024-21628", "field": "creation_timestamp", "uuid": "3215b20b-00df-48d0-b242-3230cd51f688", "content": "\u203c\ufe0fCVE-2024-21628\u203c\ufe0f\n\nPrestaShop is an opensource ecommerce platform. Prior to version 8.1.3, the isCleanHtml method is not used on this this form, which makes it possible to store a crosssite scripting payload in the database. The impact is low because the HTML is not interpreted in BO, thanks to twig's escape mechanism. In FO, the crosssite scripting attack is effective, but only impacts the customer sending it, or the customer session from which it was sent. This issue affects those who have a module fetching these messages from the DB and displaying it without escaping HTML. Version 8.1.3 contains a patch for this issue.\n\n\ud83d\udcd6 Read more\n\nVia \"National Vulnerability Database\"", "url": "https://t.me/cibsecurity/74213"}, {"timestamp": "2024-01-03T21:48:56Z", "date_only": false, "value": "2024-01-03T21:48:56Z", "kind": "milestone", "label": "Published", "source": "github \u00b7 GHSA-VR7M-R9VM-M4WF", "record": "GHSA-VR7M-R9VM-M4WF", "field": "published"}, {"timestamp": "2024-01-03T21:48:56Z", "date_only": false, "value": "2024-01-03T21:48:56Z", "kind": "other", "label": "Updated", "source": "github \u00b7 GHSA-VR7M-R9VM-M4WF", "record": "GHSA-VR7M-R9VM-M4WF", "field": "modified"}, {"timestamp": "2024-01-08T00:00:00Z", "date_only": true, "value": "2024-01-08", "kind": "other", "label": "Submit Time", "source": "cnvd \u00b7 CNVD-2024-03224", "record": "CNVD-2024-03224", "field": "submitTime"}, {"timestamp": "2024-01-08T19:11:25.070Z", "date_only": false, "value": "2024-01-08T19:11:25.070", "kind": "other", "label": "Updated", "source": "gsd \u00b7 GSD-2024-21628", "record": "GSD-2024-21628", "field": "namespaces.nvd.nist.gov.cve.lastModified"}, {"timestamp": "2024-01-16T16:32:28.268Z", "date_only": false, "value": "2024-01-16T16:32:28.268211Z", "kind": "other", "label": "Recorded", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21628", "field": "containers.adp.1.metrics.0.other.content.timestamp"}, {"timestamp": "2024-01-16T16:32:28.268Z", "date_only": false, "value": "2024-01-16T16:32:28.268211Z", "kind": "other", "label": "Recorded", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21628", "record": "FKIE_CVE-2024-21628", "field": "metrics.ssvcV203.0.ssvcData.timestamp"}, {"timestamp": "2024-01-18T00:00:00Z", "date_only": true, "value": "2024-01-18", "kind": "other", "label": "Open Time", "source": "cnvd \u00b7 CNVD-2024-03224", "record": "CNVD-2024-03224", "field": "openTime"}, {"timestamp": "2024-01-23T10:26:57Z", "date_only": false, "value": "2024-01-23T10:26:57.000000Z", "kind": "sighting", "label": "Seen", "source": "https://t.me/ctinow/171831", "record": "CVE-2024-21628", "field": "creation_timestamp", "uuid": "d3982206-98a8-47fb-902b-d24df76c0656", "content": "https://ift.tt/1cverQ5\nCVE-2024-21628 | PrestaShop up to 8.1.2 Form isCleanHtml cross site scripting (GHSA-vr7m-r9vm-m4wf)", "url": "https://t.me/ctinow/171831"}, {"timestamp": "2024-03-06T11:02:17.596Z", "date_only": false, "value": "2024-03-06T11:02:17.596Z", "kind": "milestone", "label": "Published", "source": "bitnami_vulndb \u00b7 BIT-PRESTASHOP-2024-21628", "record": "BIT-PRESTASHOP-2024-21628", "field": "published"}, {"timestamp": "2024-08-01T22:27:35.896Z", "date_only": false, "value": "2024-08-01T22:27:35.896Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CVE", "record": "CVE-2024-21628", "field": "containers.adp.0.providerMetadata.dateUpdated"}, {"timestamp": "2024-11-14T19:10:16.008Z", "date_only": false, "value": "2024-11-14T19:10:16.008Z", "kind": "other", "label": "Updated", "source": "cvelistv5", "record": "CVE-2024-21628", "field": "cveMetadata.dateUpdated"}, {"timestamp": "2024-11-14T19:10:16.008Z", "date_only": false, "value": "2024-11-14T19:10:16.008Z", "kind": "other", "label": "Updated", "source": "cvelistv5 / CISA-ADP", "record": "CVE-2024-21628", "field": "containers.adp.1.providerMetadata.dateUpdated"}, {"timestamp": "2025-05-20T10:02:07.006Z", "date_only": false, "value": "2025-05-20T10:02:07.006Z", "kind": "other", "label": "Updated", "source": "bitnami_vulndb \u00b7 BIT-PRESTASHOP-2024-21628", "record": "BIT-PRESTASHOP-2024-21628", "field": "modified"}, {"timestamp": "2026-06-17T07:09:52.680Z", "date_only": false, "value": "2026-06-17T07:09:52.680", "kind": "other", "label": "Updated", "source": "fkie_nvd \u00b7 FKIE_CVE-2024-21628", "record": "FKIE_CVE-2024-21628", "field": "lastModified"}]}
