Skip to content
OpenAdvisories

Vendor

PrestaShop

78 known vulnerabilities.

Products

PrestaShop 58 productcomments 3 blockwishlist 2 M4 PDF plugin 2 ps_facetedsearch 2 ps_linklist 2 blockreassurance 2 ps_socialfollow 1 The firmware 1 psgdpr 1 contactform 1 dashproducts 1 ps_contactinfo 1 ps_emailsubscription 1
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 8.1
    CVE-2022-31101 Public exploit Scanner template EPSS 23%

    SQL Injection in prestashop/blockwishlist

    prestashop/blockwishlist is a prestashop extension which adds a block containing the customer's wishlists. In affected versions an authenticated customer can perform SQL injection. This issue is fixed in version 2.1.1. Users are advised to upgrade. There are …

    PrestaShop blockwishlist prestashop/blockwishlist Packagist
  • High 7.5
    CVE-2021-43789 Public exploit

    Blind SQLi using Search filters in PrestaShop

    PrestaShop is an Open Source e-commerce web application. Versions of PrestaShop prior to 1.7.8.2 are vulnerable to blind SQL injection using search filters with `orderBy` and `sortOrder` parameters. The problem is fixed in version 1.7.8.2.

    PrestaShop PrestaShop prestashop/prestashop Web / CMS Packagist
  • High 7.6
    CVE-2020-5250 Public exploit

    Possible information disclosure in PrestaShop

    In PrestaShop before version 1.7.6.4, when a customer edits their address, they can freely change the id_address in the form, and thus steal someone else's address. It is the same with CustomerForm, you are able to change the id_customer and change all inform…

    PrestaShop PrestaShop Web / CMS