Advisories · Technology
PrestaShop.
Every CVE that names PrestaShop among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.
- CVSS 6.9 Medium
Incorrect access control in PrestaShop
- PrestaShop
- Authentication bypass
- CVSS 4.8 Medium
Cross-Site Scripting (XSS) vulnerability in Prestashop
- Prestashop
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Possible XSS injection through DataColumn Grid class
- PrestaShop
- Cross-site scripting (XSS)
- CVSS 6.1 Medium
Improper session management for soft logout
- PrestaShop
- Authentication bypass
- CVSS 6.8 Medium
CSV Injection via csv export
- PrestaShop
- Command injection
- CVSS 7.5 High
Improper Access Control in PrestaShop
- PrestaShop
- Broken access control
- CVSS 5.4 Medium
Stored XSS in PrestaShop
- PrestaShop
- Cross-site scripting (XSS)
-
Blind SQL Injection in PrestaShop
- PrestaShop
- SQL injection
- CVSS 5.4 Medium
Potential XSS in PrestaShop
- PrestaShop
- Cross-site scripting (XSS)
- CVSS 8.9 High
Improper Authentication
- PrestaShop
- Authentication bypass
- CVSS 7.1 High
External control of configuration setting in the dashboard in PrestaShop
- PrestaShop
- CVSS 4.7 Medium
Reflected XSS when uploading an image in the Product page in PrestaShop
- PrestaShop
- Cross-site scripting (XSS)
- CVSS 5.4 Medium
Stored XSS in PrestaShop
- PrestaShop
- Cross-site scripting (XSS)
- CVSS 6.4 Medium
Improper access control in PrestaShop
- PrestaShop
- Broken access control
- CVSS 5.3 Medium
Information disclosure in release archive in PrestaShop
- PrestaShop
- Information disclosure
- CVSS 5.3 Medium
Information exposure in the upload directory in PrestaShop
- PrestaShop
- CWE-548
- CVSS 4.1 Medium
Reflected XSS related in import page in PrestaShop
- PrestaShop
- Cross-site scripting (XSS)
- CVSS 4.1 Medium
Improper access control on customers search in PrestaShop
- PrestaShop
- Broken access control
- CVSS 4.1 Medium
Improper access control on product attributes page in PrestaShop
- PrestaShop
- Broken access control
- CVSS 6.5 Medium
Improper access control on product page with combinations, attachments and specific prices in PrestaShop
- PrestaShop
- Broken access control
- CVSS 4.1 Medium
Reflected XSS with dashboard calendar of PrestaShop
- PrestaShop
- Cross-site scripting (XSS)
- CVSS 4.1 Medium
Reflected XSS on Search page of PrestaShop
- PrestaShop
- Cross-site scripting (XSS)
- CVSS 4.1 Medium
Reflected XSS on AdminCarts page of PrestaShop
- PrestaShop
- Cross-site scripting (XSS)
- CVSS 4.1 Medium
Reflected XSS on Exception page of PrestaShop
- PrestaShop
- Cross-site scripting (XSS)
- CVSS 4.1 Medium
Improper Access Control for certain legacy controller in PrestaShop
- PrestaShop
- Broken access control
- CVSS 4.1 Medium
Reflected XSS with back parameter in PrestaShop
- PrestaShop
- Cross-site scripting (XSS)
- CVSS 4.1 Medium
Reflected XSS on AdminFeatures page of PrestaShop
- PrestaShop
- Cross-site scripting (XSS)
- CVSS 4.1 Medium
Open redirection when using back parameter of PrestaShop
- PrestaShop
- Open redirect
- CVSS 4.4 Medium
Reflected XSS in security compromised page of PrestaShop
- PrestaShop
- Cross-site scripting (XSS)
- CVSS 4.4 Medium
Reflected XSS on AdminAttributesGroups page of PrestaShop
- PrestaShop
- Cross-site scripting (XSS)
- CVSS 7.6 High
Possible information disclosure in PrestaShop
- PrestaShop
- Broken access control