Skip to content
OpenAdvisories

Vendor

PrestaShop

78 known vulnerabilities.

Products

PrestaShop 58 productcomments 3 blockwishlist 2 M4 PDF plugin 2 ps_facetedsearch 2 ps_linklist 2 blockreassurance 2 ps_socialfollow 1 The firmware 1 psgdpr 1 contactform 1 dashproducts 1 ps_contactinfo 1 ps_emailsubscription 1
All Critical High Medium Low Exploited only Public exploit

5 results · Clear filters · Feed

  • Critical 9.3
    CVE-2026-44212 Public exploit

    PrestaShop: Stored XSS executable in customer service view

    PrestaShop is an open source e-commerce web application. Prior to 8.2.6 and 9.1.1, there is a stored Cross-Site Scripting (XSS) vulnerability in the PrestaShop back-office Customer Service view. An unauthenticated attacker can submit the public Contact Us for…

    PrestaShop PrestaShop prestashop/prestashop Web / CMS Packagist
  • Critical 9.7
    CVE-2024-34716 Public exploit EPSS 59%

    PrestaShop vulnerable to XSS via customer contact form in FO, through file upload

    PrestaShop is an open source e-commerce web application. A cross-site scripting (XSS) vulnerability that only affects PrestaShops with customer-thread feature flag enabled is present starting from PrestaShop 8.1.0 and prior to PrestaShop 8.1.6. When the custo…

    PrestaShop PrestaShop prestashop/prestashop Web / CMS Packagist
  • Critical 9.1
    CVE-2023-39526 Public exploit

    PrestaShopSQL manager vulnerability (potential RCE)

    PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to remote code execution through SQL injection and arbitrary file write in the back office. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patc…

    PrestaShop PrestaShop prestashop/prestashop Web / CMS Packagist
  • Critical 10.0
    CVE-2023-30839 Public exploit

    PrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager"

    PrestaShop is an Open Source e-commerce web application. Versions prior to 8.0.4 and 1.7.8.9 contain a SQL filtering vulnerability. A BO user can write, update, and delete in the database, even without having specific rights. PrestaShop 8.0.4 and 1.7.8.9 cont…

    PrestaShop PrestaShop prestashop/prestashop Web / CMS Packagist
  • Critical 9.8
    CVE-2022-31181 Public exploit Scanner template

    Remote code execution in prestashop

    PrestaShop is an Open Source e-commerce platform. In versions from 1.6.0.10 and before 1.7.8.7 PrestaShop is subject to an SQL injection vulnerability which can be chained to call PHP's Eval function on attacker input. The problem is fixed in version 1.7.8.7.…

    PrestaShop PrestaShop prestashop/prestashop Web / CMS Packagist