PrestaShop Incorrect Sanitization Vulnerability in Address Update Function Allowing Data Injection

A vulnerability exists in PrestaShop version 8.2.1 due to improper sanitization of elements, specifically in the 'Update your address' function. The issue arises from insufficient validation of the 'Alias' parameter, enabling attackers to inject malicious expressions. These expressions are executed when the 'Get my data in CSV' tool is used, potentially leading to unauthorized access to the victim's personal data.

Impact

Exploitation of this vulnerability could result in unauthorized access to personal data.