Skip to content
OpenAdvisories

Package · Packagist

prestashop/ps_checkout

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Low —
    GHSA-mqq7-wxx5-mp8h

    ps_checkout allows unauthorized method invocation through unvalidated parameter

    ### Impact Unvalidated parameter can lead to some unauthorized method invocation with very little possibilities. ### Patches The problem has been patched in versions - v5.3.0 for PrestaShop 1.7 (build number: 7.5.3.0) - v5.3.0 for PrestaShop 8 (build number: …

    prestashop/ps_checkout Packagist
  • Low 3.8
    CVE-2025-61924

    PrestaShop Checkout Target PayPal merchant account hijacking from backoffice

    PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the Target PayPal merchant account hijacking from backoffice due to wrong usage of the PHP array_search(). The vulnerability is fix…

    PrestaShopCorp ps_checkout prestashop/ps_checkout Packagist
  • Medium 4.1
    CVE-2025-61923

    PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure

    PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the backoffice is missing validation on input resulting in a directory traversal and arbitrary file disclosure. The vulnerability i…

    PrestaShopCorp ps_checkout prestashop/ps_checkout Packagist
  • Critical 9.1
    CVE-2025-61922 Public exploit

    PrestaShop Checkout allows customer account takeover via email

    PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. Starting in version 1.3.0 and prior to versions 4.4.1 and 5.0.5, missing validation on the Express Checkout feature allows silent login, enabling account takeover via em…

    PrestaShopCorp ps_checkout prestashop/ps_checkout Packagist