Filter
Versions
1.7.0.0
8
8.0.0
6
1.5.0.0
4
1.5.5.0
4
1.6.0.1
4
1.4.0.6
3
1.7.2.5
3
0.8.1
2
0.8.2
2
0.8.3
2
0.8.4
2
0.8.5
2
0.8.5.1
2
0.9
2
0.9.1-rc1
2
0.9.1-rc2
2
0.9.2
2
0.9.5
2
0.9.6
2
0.9.7
2
1.0
2
1.0.0.1
2
1.0.0.2
2
1.0.0.3
2
1.0.0.4
2
1.0.0.5
2
1.1.0.3
2
1.4.0.1
2
1.4.4.1
2
1.6
2
1.7
2
1.7.2.4
2
1.7.5.0
2
1.7.5.2
2
1.7.7.0
2
8.1.0
2
1.4
1
1.4.0.10
1
1.4.0.11
1
1.4.0.12
1
1.4.0.13
1
1.4.0.14
1
1.4.0.15
1
1.4.0.16
1
1.4.0.17
1
1.4.0.2
1
1.4.0.3
1
1.4.0.4
1
1.4.0.5
1
1.4.0.7
1
1.4.0.8
1
1.4.0.9
1
1.4.1.0
1
1.4.2.4
1
1.4.2.5
1
1.4.3.0
1
1.4.4.0
1
1.4.5.1
1
1.4.6.1
1
1.4.6.2
1
1.4.7.0
1
1.4.7.1
1
1.6.0.0
1
1.6.0.10
1
1.6.0.4
1
1.6.0.9
1
1.6.1.18
1
1.7.6.0-beta1
1
1.7.6.0-rc1
1
1.7.6.2
1
1.7.6.7
1
1.7.8.3
1
8.1.7
1
composer/prestashop/prestashopXSS can be stored in DB from "add a message form" in order detail page (FO)
6.1
EPSS
0.05%
First published (updated )
composer/prestashop/prestashopSome attribute not escaped in Validate::isCleanHTML method
8.1
EPSS
0.05%
First published (updated )
Prestashop PrestashopImproper Privilege Management in Prestashop
6.3
First published (updated )
Prestashop PrestashopEmployee without any access rights can list all installed modules in Prestashop
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopPrestaShop vulnerable to file deletion via CustomerMessage
9.1
First published (updated )
Prestashop PrestashopPrestaShop vulnerable to file deletion via attachment API
9.1
First published (updated )
Prestashop PrestashopPrestaShop vulnerable to file reading through path traversal
8.6
First published (updated )
Prestashop PrestashopPrestaShop XSS vulnerability through Validate::isCleanHTML method
8.3
First published (updated )
Prestashop PrestashopPrestaShopSQL manager vulnerability (potential RCE)
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopPrestaShop vulnerable to path traversal
9.1
First published (updated )
composer/prestashop/prestashopPrestaShop vulnerable to boolean SQL injection in search product in BO
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopPrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager"
10
First published (updated )
Prestashop PrestashopPrestaShop vulnerable to possible XSS injection through Validate::isCleanHTML method
9.9
First published (updated )
Prestashop PrestashopPrestaShop arbitrary file read vulnerability
7.7
First published (updated )
Prestashop PrestashopPrestaShop has possible CSRF token fixation
8.8
First published (updated )
Prestashop PrestashopPotential Information exposure in the upload directory in PrestaShop
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopRemote code execution in prestashop
9.8
First published (updated )
Prestashop PrestashopServer Side Twig Template Injection in PrestaShop
9.8
First published (updated )
Prestashop PrestashopBlind SQLi using Search filters in PrestaShop
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopPossible XSS injection through DataColumn Grid class
5.4
First published (updated )
Prestashop PrestashopImproper session management for soft logout
9.1
First published (updated )
Prestashop PrestashopImproper Access Control in PrestaShop
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.