Skip to content
OpenAdvisories
Low · 2.0 CVE-2026-33674 EUVD-2026-16442GHSA-283w-xf3q-788v

PrestaShop: Improper Use of Validation Framework

Published Mar 26, 2026 · Updated Mar 30, 2026 · Assigned by GitHub_M

Description

PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 improperly use the validation framework. Versions 8.2.5 and 9.1.0 contain a fix. No known workarounds are available.

Affected products

VendorProductAffectedFixed
PrestaShop PrestaShop < 8.2.5, >= 9.0.0-alpha.1, < 9.1.0 —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist prestashop/prestashop < 8.2.5 8.2.5 GHSA-283w-xf3q-788v
Packagist prestashop/prestashop >= 9.0.0-alpha.1, < 9.1.0 9.1.0 GHSA-283w-xf3q-788v

References