PrestaShop module ps_facetedsearch versions prior to 2.1.0 has a reflected XSS with social networks fields The problem is fixed in 2.1.0
prestashop prestashop socialfollow