Filters
Versions
1.7.0.0
8
8.0.0
6
1.5.0.0
4
1.5.5.0
4
1.6.0.1
4
1.4.0.6
3
1.7.2.5
3
0.8.1
2
0.8.2
2
0.8.3
2
0.8.4
2
0.8.5
2
0.8.5.1
2
0.9
2
0.9.1-rc1
2
0.9.1-rc2
2
0.9.2
2
0.9.5
2
0.9.6
2
0.9.7
2
1.0
2
1.0.0.1
2
1.0.0.2
2
1.0.0.3
2
1.0.0.4
2
1.0.0.5
2
1.1.0.3
2
1.4.0.1
2
1.4.4.1
2
1.6
2
1.7
2
1.7.2.4
2
1.7.5.0
2
1.7.5.2
2
1.7.7.0
2
8.1.0
2
1.4
1
1.4.0.10
1
1.4.0.11
1
1.4.0.12
1
1.4.0.13
1
1.4.0.14
1
1.4.0.15
1
1.4.0.16
1
1.4.0.17
1
1.4.0.2
1
1.4.0.3
1
1.4.0.4
1
1.4.0.5
1
1.4.0.7
1
1.4.0.8
1
1.4.0.9
1
1.4.1.0
1
1.4.2.4
1
1.4.2.5
1
1.4.3.0
1
1.4.4.0
1
1.4.5.1
1
1.4.6.1
1
1.4.6.2
1
1.4.7.0
1
1.4.7.1
1
1.6.0.0
1
1.6.0.10
1
1.6.0.4
1
1.6.0.9
1
1.6.1.18
1
1.7.6.0-beta1
1
1.7.6.0-rc1
1
1.7.6.2
1
1.7.6.7
1
1.7.8.3
1
8.1.7
1
composer/prestashop/prestashopXSS can be stored in DB from "add a message form" in order detail page (FO)
6.1
EPSS
0.05%
First published (updated )
composer/prestashop/prestashopSome attribute not escaped in Validate::isCleanHTML method
8.1
EPSS
0.05%
First published (updated )
Prestashop PrestashopImproper Privilege Management in Prestashop
6.3
First published (updated )
Prestashop PrestashopEmployee without any access rights can list all installed modules in Prestashop
4.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopPrestaShop vulnerable to file deletion via CustomerMessage
9.1
First published (updated )
Prestashop PrestashopPrestaShop vulnerable to file deletion via attachment API
9.1
First published (updated )
Prestashop PrestashopPrestaShop vulnerable to file reading through path traversal
8.6
First published (updated )
Prestashop PrestashopPrestaShop XSS vulnerability through Validate::isCleanHTML method
8.3
First published (updated )
Prestashop PrestashopPrestaShopSQL manager vulnerability (potential RCE)
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopPrestaShop vulnerable to path traversal
9.1
First published (updated )
composer/prestashop/prestashopPrestaShop vulnerable to boolean SQL injection in search product in BO
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopPrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager"
10
First published (updated )
Prestashop PrestashopPrestaShop vulnerable to possible XSS injection through Validate::isCleanHTML method
9.9
First published (updated )
Prestashop PrestashopPrestaShop arbitrary file read vulnerability
7.7
First published (updated )
Prestashop PrestashopPrestaShop has possible CSRF token fixation
8.8
First published (updated )
Prestashop PrestashopPotential Information exposure in the upload directory in PrestaShop
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopRemote code execution in prestashop
9.8
First published (updated )
Prestashop PrestashopServer Side Twig Template Injection in PrestaShop
9.8
First published (updated )
Prestashop PrestashopBlind SQLi using Search filters in PrestaShop
9.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopPossible XSS injection through DataColumn Grid class
5.4
First published (updated )
Prestashop PrestashopImproper session management for soft logout
9.1
First published (updated )
Prestashop PrestashopImproper Access Control in PrestaShop
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopBlind SQL Injection in PrestaShop
9.8
First published (updated )
Prestashop PrestashopExternal control of configuration setting in the dashboard in PrestaShop
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopReflected XSS when uploading an image in the Product page in PrestaShop
6.1
First published (updated )
Prestashop PrestashopImproper access control in PrestaShop
6.4
First published (updated )
Prestashop PrestashopInformation disclosure in release archive in PrestaShop
5.3
First published (updated )
Prestashop PrestashopInformation exposure in the upload directory in PrestaShop
5.3
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopReflected XSS related in import page in PrestaShop
6.1
First published (updated )
Prestashop PrestashopImproper access control on customers search in PrestaShop
6.5
First published (updated )
Prestashop PrestashopImproper access control on product attributes page in PrestaShop
6.5
First published (updated )
Prestashop PrestashopImproper access control on product page with combinations, attachments and specific prices in PrestaShop
6.5
First published (updated )
Prestashop PrestashopReflected XSS with dashboard calendar of PrestaShop
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopReflected XSS on Search page of PrestaShop
6.1
First published (updated )
Prestashop PrestashopReflected XSS on AdminCarts page of PrestaShop
6.1
First published (updated )
Prestashop PrestashopReflected XSS on Exception page of PrestaShop
6.1
First published (updated )
Prestashop PrestashopImproper Access Control for certain legacy controller in PrestaShop
6.5
First published (updated )
Prestashop PrestashopReflected XSS with back parameter in PrestaShop
6.1
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.