Skip to contentPrestashop vulnerabilities
Newest
- prestashop m4 pdf plugin, m4 pdf +1 morePath Traversal in M4 PDF plugin for Prestashop sitesCVE-2022-454476.5 Medium
- prestashopPrestaShop vulnerable to file deletion via CustomerMessageCVE-2023-39530Fix available6.5 Medium
- prestashopPrestaShop vulnerable to file deletion via attachment APICVE-2023-39529Fix available6.7 Medium
- prestashopPrestaShop vulnerable to file reading through path traversalCVE-2023-39528Fix available6.8 Medium
- prestashopPrestaShop XSS vulnerability through Validate::isCleanHTML methodCVE-2023-39527Fix available8.3 High
- prestashopPrestaShopSQL manager vulnerability (potential RCE)CVE-2023-39526Public exploitFix available9.1 Critical
- prestashopPrestaShop vulnerable to path traversalCVE-2023-39525Fix available6.5 Medium
- prestashopPrestaShop vulnerable to boolean SQL injection in search product in BOCVE-2023-39524Fix available6.7 Medium
- prestashop amazonAn issue in /functions/fbaorder.php of Prestashop amazon before v5.2.24 allows attackers to...CVE-2023-337775.3 Medium
- prestashop payplugAn SQL injection vulnerability in the Payplug (payplug) module for PrestaShop, in versions 3.6.0,...CVE-2023-301539.8 Critical
- prestashop possearchproductsPrestashop possearchproducts 1.7 is vulnerable to SQL Injection via PosSearch::find().CVE-2023-301929.8 Critical
- prestashop poststaticfooterPrestashop posstaticfooter <= 1.0.0 is vulnerable to SQL Injection via posstaticfooter:...CVE-2023-30194EPSS 32.4%9.8 Critical
- prestashop scexportcustomersPrestaShop scexportcustomers <= 3.6.1 is vulnerable to Incorrect Access Control. Due to a lack of...CVE-2023-302827.5 High
- prestashopPrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager"CVE-2023-30839Public exploitFix available10.0 Critical
- prestashopPrestaShop vulnerable to possible XSS injection through Validate::isCleanHTML methodCVE-2023-30838Fix available8.6 High
- prestashopPrestaShop arbitrary file read vulnerabilityCVE-2023-30545Fix available7.7 High
- prestashop eo tagsThe eo_tags package before 1.4.19 for PrestaShop allows SQL injection via a crafted _ga cookie.CVE-2023-275709.8 Critical
- prestashop eo tagsThe eo_tags package before 1.3.0 for PrestaShop allows SQL injection via an HTTP User-Agent or...CVE-2023-275699.8 Critical
- prestashop advanced reviewsPrestaShop ws_productreviews < 3.6.2 is vulnerable to SQL Injection.CVE-2023-252068.8 High
- prestashopPrestaShop has possible CSRF token fixationCVE-2023-25170Fix available5.0 Medium
- prestashop dpd francePrestaShop dpdfrance <6.1.3 is vulnerable to SQL Injection via dpdfrance/ajax.php.CVE-2023-252079.8 Critical
- prestashop xen forumIn the module "Xen Forum" (xenforum) for PrestaShop, an authenticated user can perform SQL...CVE-2023-247638.8 High
- prestashopPotential Information exposure in the upload directory in PrestaShopCVE-2022-46158Fix available5.3 Medium
- prestashop productcommentsPrestaShop module Product Comments vulnerable to cross-site scripting (XSS)CVE-2022-35933Fix available4.3 Medium
- prestashopRemote code execution in prestashopCVE-2022-31181Public exploitFix available9.8 Critical
- prestashopFile upload vulnerability in the Catalog feature in Prestashop 1.7.6.7 allows remote attackers to...CVE-2020-219674.8 Medium
- prestashop blockwishlistSQL Injection in prestashop/blockwishlistCVE-2022-31101Public exploitFix availableEPSS 23.5%8.1 High
- prestashopServer Side Twig Template Injection in PrestaShopCVE-2022-21686Fix available9.0 Critical
- prestashopPrestaShop XSS VulnerabilityCVE-2012-20001Fix available6.1 Medium
- prestashopBlind SQLi using Search filters in PrestaShopCVE-2021-43789Public exploitFix available7.5 High
- prestashop ps emailsubscriptionPotential XSS injection in the newsletter conditions fieldCVE-2021-21418Fix available4.6 Medium
- prestashopPossible XSS injection through DataColumn Grid classCVE-2021-213985.4 Medium
- prestashopImproper session management for soft logoutCVE-2021-213086.1 Medium
- prestashopCSV Injection via csv exportCVE-2021-213026.8 Medium
- prestashopThe store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module...CVE-2021-3110EPSS 18.7%9.8 Critical
- prestashop productcommentsBlind SQL injection during the CommentGrade processCVE-2020-26248Fix availableEPSS 12.4%6.8 Medium
- prestashopImproper Access Control in PrestaShopCVE-2020-262247.5 High
- prestashop product comments, productcomments +1 moreReflected XSS in PrestaShop Product CommentsCVE-2020-26225Fix available8.7 High
- prestashopStored XSS in PrestaShopCVE-2020-151625.4 Medium
- prestashopBlind SQL Injection in PrestaShopCVE-2020-15160Public exploitEPSS 10.8%9.8 Critical
- prestashopPotential XSS in PrestaShopCVE-2020-151615.4 Medium
- prestashop contactformPotential XSS in PrestaShop contactformCVE-2020-15178Fix available8.0 High
- prestashop dashboard products, dashproducts +1 moreImproper access control on dashboard form in PrestaShopCVE-2020-151026.5 Medium
- prestashopImproper AuthenticationCVE-2020-40748.9 High
- prestashopExternal control of configuration setting in the dashboard in PrestaShopCVE-2020-150827.1 High
- prestashopReflected XSS when uploading an image in the Product page in PrestaShopCVE-2020-150834.7 Medium
- prestashopStored XSS in PrestaShopCVE-2020-110745.4 Medium
- prestashopImproper access control in PrestaShopCVE-2020-150796.4 Medium
- prestashopInformation disclosure in release archive in PrestaShopCVE-2020-150805.3 Medium
- prestashopInformation exposure in the upload directory in PrestaShopCVE-2020-150815.3 Medium
- Show moreLoading…