Feed live

PrestaShop vulnerabilities - every known CVE across the platform and its modules

Name: AskarLabs CMS CVE Database
License: https://creativecommons.org/licenses/by/4.0/
Keywords: CVE, vulnerability, CMS, WordPress, Joomla, Drupal, plugin, theme, security

PrestaShop's modular architecture is popular with European e-commerce sites, and most disclosed CVEs trace back to third-party modules rather than core.

Total CVEs tracked

347,715

All time

Critical · Active

12,045

CVSS ≥ 9.0

New · 14 days

2,431

Newly disclosed

Feed last synced

1 hr ago

Data freshness

Showing 61–71 CVEs

Sorted by Published · Newest first

CVE ID	Severity	CVSS	Title	Published
CVE-2020-5276	medium	4.1/10	Reflected XSS on AdminCarts page of PrestaShop	Apr 20, 2020 6y ago
CVE-2020-5278	medium	4.1/10	Reflected XSS on Exception page of PrestaShop	Apr 20, 2020 6y ago
CVE-2020-5279	medium	4.1/10	Improper Access Control for certain legacy controller in PrestaShop	Apr 20, 2020 6y ago
CVE-2020-5285	medium	4.1/10	Reflected XSS with back parameter in PrestaShop	Apr 20, 2020 6y ago
CVE-2020-5269	medium	4.1/10	Reflected XSS on AdminFeatures page of PrestaShop	Apr 20, 2020 6y ago
CVE-2020-5270	medium	4.1/10	Open redirection when using back parameter of PrestaShop	Apr 20, 2020 6y ago
CVE-2020-5264	medium	4.4/10	Reflected XSS in security compromised page of PrestaShop	Apr 20, 2020 6y ago
CVE-2020-5265	medium	4.4/10	Reflected XSS on AdminAttributesGroups page of PrestaShop	Apr 20, 2020 6y ago
CVE-2020-5273	medium	4.1/10	Stored XSS with custom URLs in PrestaShop module ps_linklist	Apr 16, 2020 6y ago
CVE-2020-5277	medium	4.1/10	Reflected XSS with url_name parameter of PrestaShop module ps_facetedsearch	Mar 25, 2020 6y ago
CVE-2020-5250	high	7.6/10	Possible information disclosure in PrestaShop	Mar 5, 2020 6y ago