Prestashop vulnerabilities
78 CVEs and advisories name Prestashop as an affected vendor, newest first. Follow it as a feed.
- CVE-2023-30839PrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager"
- CVE-2023-30838PrestaShop vulnerable to possible XSS injection through Validate::isCleanHTML method
- CVE-2023-30545PrestaShop arbitrary file read vulnerability
- CVE-2023-25170PrestaShop has possible CSRF token fixation
- CVE-2022-46158Potential Information exposure in the upload directory in PrestaShop
- CVE-2022-35933PrestaShop module Product Comments vulnerable to cross-site scripting (XSS)
- CVE-2022-31181Remote code execution in prestashop
- CVE-2022-31101SQL Injection in prestashop/blockwishlist
- CVE-2022-21686Server Side Twig Template Injection in PrestaShop
- CVE-2021-43789Blind SQLi using Search filters in PrestaShop
- CVE-2021-21418Potential XSS injection in the newsletter conditions field
- CVE-2021-21398Possible XSS injection through DataColumn Grid class
- CVE-2021-21308Improper session management for soft logout
- CVE-2021-21302CSV Injection via csv export
- CVE-2020-26248Blind SQL injection during the CommentGrade process
- CVE-2020-26225Reflected XSS in PrestaShop Product Comments
- CVE-2020-26224Improper Access Control in PrestaShop
- CVE-2020-15162Stored XSS in PrestaShop
- CVE-2020-15160Blind SQL Injection in PrestaShop
- CVE-2020-15161Potential XSS in PrestaShop
- CVE-2020-15178Potential XSS in PrestaShop contactform
- CVE-2020-15102Improper access control on dashboard form in PrestaShop
- CVE-2020-4074Improper Authentication
- CVE-2020-15082External control of configuration setting in the dashboard in PrestaShop
- CVE-2020-15083Reflected XSS when uploading an image in the Product page in PrestaShop
- CVE-2020-11074Stored XSS in PrestaShop
- CVE-2020-15079Improper access control in PrestaShop
- CVE-2020-15080Information disclosure in release archive in PrestaShop
- CVE-2020-15081Information exposure in the upload directory in PrestaShop
- CVE-2020-5286Reflected XSS related in import page in PrestaShop