Skip to content
OpenAdvisories

Package · Packagist

prestashop/ps_facetedsearch

2 known vulnerabilities.

2 results · Feed

  • Critical 10.0

    ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE

    PrestaShop ps_facetedsearch is a module that adds layered navigation filters. From 3.0.0 until 4.0.4, the ps_facetedsearch module rebuilds selected search filters from the request URL, and the value of a slider filter, price or weight, is taken from the URL w…

  • High —

    PrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841

    ### Impact We have identified that some ps_facetedsearch module ZIP archives have been built with phpunit dev dependencies. PHPUnit contains a php script that would allow, on a webserver, an attacker to perform a RCE. This vulnerability impacts - phpunit befo…