Skip to content
OpenAdvisories

Vendor

PrestaShop

78 known vulnerabilities.

Products

PrestaShop 58 productcomments 3 blockwishlist 2 M4 PDF plugin 2 ps_facetedsearch 2 ps_linklist 2 blockreassurance 2 ps_socialfollow 1 The firmware 1 psgdpr 1 contactform 1 dashproducts 1 ps_contactinfo 1 ps_emailsubscription 1
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Low 2.0
    CVE-2026-33674

    PrestaShop: Improper Use of Validation Framework

    PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 improperly use the validation framework. Versions 8.2.5 and 9.1.0 contain a fix. No known workarounds are available.

    PrestaShop PrestaShop prestashop/prestashop Web / CMS Packagist
  • Low 3.5
    CVE-2022-45448

    Cross-site Scripting in M4 PDF plugin for Prestashop sites

    M4 PDF plugin for Prestashop sites, in its 3.2.3 version and before, is vulnerable to an arbitrary HTML Document crafting vulnerability. The resource /m4pdf/pdf.php uses templates to dynamically create documents. In the case that the template does not exist, …

    PrestaShop M4 PDF plugin