Filter
AND
Software
composer/prestashop/prestashopSome attribute not escaped in Validate::isCleanHTML method
8.1
EPSS
0.05%
First published (updated )
composer/prestashop/blockreassurancePrestaShop blockreassurance BO User can remove any file from server when adding a and deleting a block
8.1
First published (updated )
Prestashop PrestashopPrestaShop vulnerable to file reading through path traversal
8.6
First published (updated )
Prestashop PrestashopPrestaShop XSS vulnerability through Validate::isCleanHTML method
8.3
First published (updated )
Prestashop ScexportcustomersPrestaShop scexportcustomers <= 3.6.1 is vulnerable to Incorrect Access Control. Due to a lack of pe…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopPrestaShop arbitrary file read vulnerability
7.7
First published (updated )
Prestashop PrestashopPrestaShop has possible CSRF token fixation
8.8
First published (updated )
Prestashop BlockwishlistSQL Injection in prestashop/blockwishlist
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop ProductcommentsBlind SQL injection during the CommentGrade process
8.2
First published (updated )
PrestaShop Product CommentsReflected XSS in PrestaShop Product Comments
8.7
First published (updated )
Prestashop PrestashopImproper Access Control in PrestaShop
7.5
First published (updated )
Prestashop PrestashopExternal control of configuration setting in the dashboard in PrestaShop
8.8
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop Correos ExpressThe Correos Express addon for PrestaShop 1.6 through 1.7 allows remote attackers to obtain sensitive…
7.5
First published (updated )
Prestashop PrestashopPossible information disclosure in PrestaShop
7.6
First published (updated )
Prestashop PrestashopIn PrestaShop before 1.7.6.0 RC2, the id_address_delivery and id_address_invoice parameters are affe…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Prestashop PrestashopPrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image…
7.5
First published (updated )
Prestashop PrestashopIn PrestaShop through 1.7.2.5, a UI-Redressing/Clickjacking vulnerability was found that might lead …
7.5
First published (updated )