High
CVE-2023-39525
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 50
Reset filters
Medium
CVE-2023-39524
Full SQL injection possible in search product in backoffice
Critical
CVE-2023-39528
Reading a file through path traversal & Remote Code Execution via unsafe deserialization
Medium
CVE-2023-25170
Possible CSRF token fixation (CWE-352)
Medium
CVE-2022-46158
PrestaShop has potential Information exposure in the upload directory
Medium
CVE-2022-35933
PrestaShop Product Comments Cross-site Scripting vulnerability
Critical
CVE-2022-31181
Chain: SQL Injection (CWE-89) and Eval Injection (CWE-95)
High
CVE-2022-31101
Invalid order neutralization in an SQL query in PrestaShop blockwishlist module
Medium
CVE-2019-11876
PrestaShop Cross-site Scripting vulnerability
High
CVE-2018-20717
PrestaShop PHP Object Injection
Medium
CVE-2013-4791
PrestaShop Stored Cross-Site Scripting Vulnerability
High
CVE-2023-30839
SQL filter bypass leading to arbitrary write requests using SQL Manager [DEBATE RUNNING ABOUT SCORING FROM PS CORE]
High
CVE-2023-30838
Possible XSS injection through Validate::isCleanHTML method
Medium
CVE-2023-30545
Arbitrary file read via the backoffice Database Manager [DEBATE RUNNING ABOUT SCORING FROM PS CORE]
Medium
CVE-2012-20001
PrestaShop XSS Vulnerability
Critical
CVE-2022-21686
Server Side Twig Template Injection
High
CVE-2021-43789
SQL injection in prestashop/prestashop
Medium
CVE-2020-5273
Stored XSS with custom URLs in PrestaShop module ps_linklist
Medium
CVE-2021-21418
Potential XSS injection in the newsletter conditions field
Low
CVE-2020-26248
Blind SQL injection in PrestaShop productcomments module
Medium
CVE-2020-26225
Reflected XSS with parameters in PostComment
High
CVE-2020-15178
Potential XSS injection In PrestaShop contactform
Critical
Exploited in attacks
CVE-2017-9841
PHUnit dependancy in PrestaShop and modules allow remote arbitrary PHP code execution
High
ghsa-769f-539v-f5jg
PrestaShop gamification module ZIP archives were vulnerable from CVE-2017-9841
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.