PR
Product
Prestashop
101
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 25High 14Medium 51Low 1
Watch
Add Prestashop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-30838 | 9.9 | Apr 25 | PrestaShop is an Open Source e-commerce web application Affected: before 1.7.8.9; 8.0.0 before 8.0.4 |
| CVE-2024-34989 | 9.8 | Jun 21 | In the module RSI PDF/HTML catalog evolution (prestapdf) <= 7.0.0 from RSI for PrestaShop, a guest can perform SQL injection via… Affected: through 7.0.0 |
| CVE-2024-33276 | 9.8 | Apr 29 | SQL Injection vulnerability in FME Modules preorderandnotication v.3.1.0 and before allows a remote attacker to run arbitrary SQL commands via the… Affected: through 3.1.0 |
| CVE-2024-25845 | 9.8 | Mar 8 | In the module "CD Custom Fields 4 Orders" (cdcustomfields4orders) <= 1.0.0 from Cleanpresta.com for PrestaShop, a guest can perform SQL injection in affected versions Affected: through 1.0.0 |
| CVE-2023-39526 | 9.8 | Aug 7 | PrestaShop is an open source e-commerce web application Affected: before 1.7.8.10; 8.0.0 before 8.0.5; 8.1.0 |
| CVE-2023-39524 | 9.8 | Aug 7 | PrestaShop is an open source e-commerce web application Affected: before 8.1.1 |
| CVE-2022-31181 | 9.8 | Aug 1 | Remote code execution in prestashop Affected: >= 1.6.0.10, < 1.7.8.7 |
| CVE-2022-21686 | 9.8 | Jan 26 | PrestaShop is an Open Source e-commerce platform Affected: 1.7.0.0 through 1.7.8.3 |
| CVE-2021-43789 | 9.8 | Dec 7 | PrestaShop is an Open Source e-commerce web application Affected: 1.7.5.0 before 1.7.8.2 |
| CVE-2021-3110 | 9.8 | Jan 20 | The store system in PrestaShop 1.7.7.0 allows time-based boolean SQL injection via the module=productcomments controller=CommentGrade id_products[] parameter Affected: 1.7.7.0 |
| CVE-2020-15160 | 9.8 | Sep 24 | PrestaShop from version 1.7.5.0 and before version 1.7.6.8 is vulnerable to a blind SQL Injection attack in the Catalog Product edition page with location parameter Affected: 1.7.5.0 before 1.7.6.8 |
| CVE-2020-4074 | 9.8 | Jul 2 | In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, the authentication system is malformed and an attacker is able to forge requests and execute admin commands Affected: 1.5.0.0 before 1.7.6.6 |
| CVE-2013-6295 | 9.8 | Feb 18 | PrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module Affected: 1.5.5.0 |
| CVE-2019-19595 | 9.8 | Dec 5 | reset/modules/advanced_form_maker_edit/multiupload/upload.php in the RESET.PRO Adobe Stock API integration 4.8 for PrestaShop allows remote attackers to execute arbitrary code by… Affected: 1.6; 1.7 |
| CVE-2019-19594 | 9.8 | Dec 5 | reset/modules/fotoliaFoto/multi_upload.php in the RESET.PRO Adobe Stock API Integration for PrestaShop 1.6 and 1.7 allows remote attackers to execute arbitrary code by uploading a… Affected: 1.6; 1.7 |
| CVE-2018-19355 | 9.8 | Nov 19 | modules/orderfiles/ajax/upload.php in the Customer Files Upload addon 2018-08-01 for PrestaShop (1.5 through 1.7) allows remote attackers to execute arbitrary code by uploading a… Affected: 1.5.0.0 through 1.7.0.0 |
| CVE-2018-19126 | 9.8 | Nov 9 | PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file upload Affected: 1.6.0.1 before 1.6.1.23; 1.7.0.0 before 1.7.4.4 |
| CVE-2018-8824 | 9.8 | May 10 | modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to… Affected: 1.5.5.0 through 1.7.2.5 |
| CVE-2018-8823 | 9.8 | Mar 28 | modules/bamegamenu/ajax_phpcode.php in the Responsive Mega Menu (Horizontal+Vertical+Dropdown) Pro module 1.0.32 for PrestaShop 1.5.5.0 through 1.7.2.5 allows remote attackers to… Affected: 1.5.5.0 through 1.7.2.5 |
| CVE-2026-44212 | 9.3 | May 14 | PrestaShop: Stored XSS executable in customer service view Affected: < 8.2.6; >= 9.0.0-alpha.1, < 9.1.1 |
| CVE-2023-39530 | 9.1 | Aug 7 | PrestaShop is an open source e-commerce web application Affected: before 8.1.1 |
| CVE-2023-39529 | 9.1 | Aug 7 | PrestaShop is an open source e-commerce web application Affected: before 8.1.1 |
| CVE-2023-39525 | 9.1 | Aug 7 | PrestaShop is an open source e-commerce web application Affected: before 8.1.1 |
| CVE-2021-21308 | 9.1 | Feb 26 | PrestaShop is a fully scalable open source e-commerce solution Affected: after 1.5.0.0 before 1.7.7.2 |
| CVE-2018-13784 | 9.1 | Jul 9 | PrestaShop before 1.6.1.20 and 1.7.x before 1.7.3.4 mishandles cookie encryption in Cookie.php, Rinjdael.php, and Blowfish.php Affected: before 1.6.1.20; 1.7.0.0 before 1.7.3.4 |
Showing 25