PR
Product
Prestashop
101
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Severity mix
Critical 25High 14Medium 51Low 1
Watch
Add Prestashop to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2023-30839 | 8.8 | Apr 25 | PrestaShop is an Open Source e-commerce web application Affected: before 1.7.8.9; 8.0.0 before 8.0.4 |
| CVE-2023-25170 | 8.8 | Mar 13 | PrestaShop is an open source e-commerce web application that, prior to version 8.0.1, is vulnerable to cross-site request forgery (CSRF) Affected: before 8.0.1 |
| CVE-2020-15082 | 8.8 | Jul 2 | In PrestaShop from version 1.6.0.1 and before version 1.7.6.6, the dashboard allows rewriting all configuration variables Affected: 1.6.0.1 before 1.7.6.6 |
| CVE-2013-6358 | 8.8 | Jan 23 | PrestaShop 1.5.5 allows remote authenticated attackers to execute arbitrary code by uploading a crafted profile and then accessing it in the module/ directory Affected: 1.5.5.0 |
| CVE-2018-20717 | 8.8 | Jan 15 | In the orders section of PrestaShop before 1.7.2.5, an attack is possible after gaining access to a target store with a user role with the rights of at least a Salesman or higher… Affected: before 1.7.2.5 |
| CVE-2023-39528 | 8.6 | Aug 7 | PrestaShop is an open source e-commerce web application Affected: before 8.1.1 |
| CVE-2024-41651 | 8.1 | Aug 12 | An issue in Prestashop v.8.1.7 and before allows a remote attacker to execute arbitrary code via the module upgrade functionality Affected: through 8.1.7 |
| CVE-2024-33270 | 7.5 | Apr 30 | An issue in FME Modules fileuploads v.2.0.3 and before and fixed in v2.0.4 allows a remote attacker to obtain sensitive information via the uploadfiles.php component Affected: 2.03 before 2.04 |
| CVE-2020-26224 | 7.5 | Nov 16 | In PrestaShop before version 1.7.6.9 an attacker is able to list all the orders placed on the website without being logged by abusing the function that allows a shopping cart to… Affected: before 1.7.6.9 |
| CVE-2019-13461 | 7.5 | Jul 9 | In PrestaShop before 1.7.6.0 RC2, the id_address_delivery and id_address_invoice parameters are affected by an Insecure Direct Object Reference vulnerability due to a guessable… Affected: through 1.7.5.2; 1.7.6.0; 1.7.6.0 |
| CVE-2018-19125 | 7.5 | Nov 9 | PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory Affected: 1.6.0.1 before 1.6.1.23; 1.7.0.0 before 1.7.4.4 |
| CVE-2018-19124 | 7.5 | Nov 9 | PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 on Windows allows remote attackers to write to arbitrary image files Affected: 1.6.0.1 before 1.6.1.23; 1.7.0.0 before 1.7.4.4 |
| CVE-2018-7491 | 7.5 | Feb 26 | In PrestaShop through 1.7.2.5, a UI-Redressing/Clickjacking vulnerability was found that might lead to state-changing impact in the context of a user or an admin, because the… Affected: through 1.7.2.5 |
| CVE-2021-21302 | 7.2 | Feb 26 | PrestaShop is a fully scalable open source e-commerce solution Affected: after 1.5.0.0 before 1.7.7.2 |
Showing 14