Feed live

PrestaShop vulnerabilities - every known CVE across the platform and its modules

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

PrestaShop's modular architecture is popular with European e-commerce sites, and most disclosed CVEs trace back to third-party modules rather than core.

Total CVEs tracked

347,612

All time

Critical · Active

12,039

CVSS ≥ 9.0

New · 14 days

2,351

Newly disclosed

Feed last synced

2 hrs ago

Data freshness

Showing 31–60 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2023-30839	critical	10.0/10	PrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager"	Apr 25, 2023 3y ago
CVE-2023-30838	high	8.6/10	PrestaShop vulnerable to possible XSS injection through Validate::isCleanHTML method	Apr 25, 2023 3y ago
CVE-2023-30545	high	7.7/10	PrestaShop arbitrary file read vulnerability	Apr 25, 2023 3y ago
CVE-2023-28843	critical	9.8/10	Improper neutralization of SQL parameter in PayPal module for PrestaShop	Mar 31, 2023 3y ago
CVE-2023-25170	medium	5.0/10	PrestaShop has possible CSRF token fixation	Mar 13, 2023 3y ago
CVE-2022-46158	medium	5.3/10	Potential Information exposure in the upload directory in PrestaShop	Dec 8, 2022 3y ago
CVE-2022-35933	medium	4.3/10	PrestaShop module Product Comments vulnerable to cross-site scripting (XSS)	Sep 2, 2022 3y ago
CVE-2022-31181	critical	9.8/10	Remote code execution in prestashop	Aug 1, 2022 4y ago
CVE-2022-31101	high	8.1/10	SQL Injection in prestashop/blockwishlist	Jun 27, 2022 4y ago
CVE-2022-21686	critical	9.0/10	Server Side Twig Template Injection in PrestaShop	Jan 26, 2022 4y ago
CVE-2021-43789	high	7.5/10	Blind SQLi using Search filters in PrestaShop	Dec 7, 2021 4y ago
CVE-2020-26225	high	8.7/10	Reflected XSS in PrestaShop Product Comments	Nov 16, 2020 5y ago
CVE-2020-26224	high	7.5/10	Improper Access Control in PrestaShop	Nov 16, 2020 5y ago
CVE-2020-15162	medium	5.4/10	Stored XSS in PrestaShop	Sep 24, 2020 5y ago
CVE-2020-15160	—	—	Blind SQL Injection in PrestaShop	Sep 24, 2020 5y ago
CVE-2020-15161	medium	5.4/10	Potential XSS in PrestaShop	Sep 24, 2020 5y ago
CVE-2020-15178	high	8.0/10	Potential XSS in PrestaShop contactform	Sep 15, 2020 5y ago
CVE-2020-15102	medium	6.5/10	Improper access control on dashboard form in PrestaShop	Jul 21, 2020 6y ago
CVE-2020-15082	high	7.1/10	External control of configuration setting in the dashboard in PrestaShop	Jul 2, 2020 6y ago
CVE-2020-15083	medium	4.7/10	Reflected XSS when uploading an image in the Product page in PrestaShop	Jul 2, 2020 6y ago
CVE-2020-11074	medium	5.4/10	Stored XSS in PrestaShop	Jul 2, 2020 6y ago
CVE-2020-15079	medium	6.4/10	Improper access control in PrestaShop	Jul 2, 2020 6y ago
CVE-2020-15080	medium	5.3/10	Information disclosure in release archive in PrestaShop	Jul 2, 2020 6y ago
CVE-2020-15081	medium	5.3/10	Information exposure in the upload directory in PrestaShop	Jul 2, 2020 6y ago
CVE-2020-5286	medium	4.1/10	Reflected XSS related in import page in PrestaShop	Apr 20, 2020 6y ago
CVE-2020-5287	medium	4.1/10	Improper access control on customers search in PrestaShop	Apr 20, 2020 6y ago
CVE-2020-5288	medium	4.1/10	Improper access control on product attributes page in PrestaShop	Apr 20, 2020 6y ago
CVE-2020-5293	medium	6.5/10	Improper access control on product page with combinations, attachments and specific prices in PrestaShop	Apr 20, 2020 6y ago
CVE-2020-5271	medium	4.1/10	Reflected XSS with dashboard calendar of PrestaShop	Apr 20, 2020 6y ago
CVE-2020-5272	medium	4.1/10	Reflected XSS on Search page of PrestaShop	Apr 20, 2020 6y ago