Prestashop vulnerabilities
78 CVEs and advisories name Prestashop as an affected vendor, newest first. Follow it as a feed.
- CVE-2020-5287Improper access control on customers search in PrestaShop
- CVE-2020-5288Improper access control on product attributes page in PrestaShop
- CVE-2020-5293Improper access control on product page with combinations, attachments and specific prices in PrestaShop
- CVE-2020-5271Reflected XSS with dashboard calendar of PrestaShop
- CVE-2020-5272Reflected XSS on Search page of PrestaShop
- CVE-2020-5276Reflected XSS on AdminCarts page of PrestaShop
- CVE-2020-5278Reflected XSS on Exception page of PrestaShop
- CVE-2020-5279Improper Access Control for certain legacy controller in PrestaShop
- CVE-2020-5285Reflected XSS with back parameter in PrestaShop
- CVE-2020-5269Reflected XSS on AdminFeatures page of PrestaShop
- CVE-2020-5270Open redirection when using back parameter of PrestaShop
- CVE-2020-5264Reflected XSS in security compromised page of PrestaShop
- CVE-2020-5265Reflected XSS on AdminAttributesGroups page of PrestaShop
- CVE-2020-5266Stored XSS on back office edit page
- CVE-2020-5273Stored XSS with custom URLs in PrestaShop module ps_linklist
- CVE-2020-5294Reflected XSS with social networks fields
- CVE-2020-5277Reflected XSS with url_name parameter of PrestaShop module ps_facetedsearch
- CVE-2020-5250Possible information disclosure in PrestaShop