Medium
CVE-2023-30545
Vulnerability archive
Understand vulnerabilities. Protect your applications.
Discover which vulnerabilities affect your technologies and how to fix them. Explore clear explanations, affected versions and practical recommendations - from CMS platforms and plugins to application libraries.
Vulnerability archive 257
Reset filters
Medium
CVE-2012-20001
PrestaShop XSS Vulnerability
Critical
CVE-2022-21686
Server Side Twig Template Injection
High
CVE-2021-43789
SQL injection in prestashop/prestashop
Medium
CVE-2020-5273
Stored XSS with custom URLs in PrestaShop module ps_linklist
Critical
CVE-2021-37538
Improper neutralization of SQL parameter in SmartBlog module from SmartDataSoft for PrestaShop
Critical
CVE-2021-36748
Improper neutralization of SQL parameter in SimpleBlog module from Prestahome for PrestaShop
Medium
CVE-2021-21418
Potential XSS injection in the newsletter conditions field
Low
CVE-2020-26248
Blind SQL injection in PrestaShop productcomments module
Medium
CVE-2020-26225
Reflected XSS with parameters in PostComment
High
CVE-2020-9368
[CWE-22] Path traversal in Olea Gift On Order module (giftonorder) module for PrestaShop
High
CVE-2020-15178
Potential XSS injection In PrestaShop contactform
High
CVE-2020-16194
Authorization Bypass Through User-Controlled Key in Opart Devis module (opartdevis)
Critical
Exploited in attacks
CVE-2017-9841
PHUnit dependancy in PrestaShop and modules allow remote arbitrary PHP code execution
High
ghsa-769f-539v-f5jg
PrestaShop gamification module ZIP archives were vulnerable from CVE-2017-9841
High
ghsa-wqq8-mqj9-697f
PrestaShop autoupgrade module ZIP archives were vulnerable from CVE-2017-9841
High
ghsa-f884-gm86-cg3q
PrestaShop module ps_facetedsearch might be vulnerable from CVE-2017-9841
Know which vulnerabilities affect your application
With the DockRay integration and software inventory enabled, DockRay checks reported component versions against known vulnerabilities and notifies you about confirmed matches. Coverage depends on the supported technology and available advisory data.