Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-61922
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
PrestaShop Checkout allows customer account takeover via email
Source: NVD (National Vulnerability Database)
Vulnerability Description
PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. Starting in version 1.3.0 and prior to versions 4.4.1 and 5.0.5, missing validation on the Express Checkout feature allows silent login, enabling account takeover via email. The vulnerability is fixed in versions 4.4.1 and 5.0.5. No known workarounds exist.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
认证机制不恰当
Source: NVD (National Vulnerability Database)
Vulnerability Title
PrestaShop Checkout 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PrestaShop Checkout是PrestaShopCorp开源的一个结账支付模块。 PrestaShop Checkout 4.4.1之前版本和5.0.5之前版本存在授权问题漏洞，该漏洞源于Express Checkout功能缺少验证，可能导致通过电子邮件进行账户接管。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
VendorProductAffected VersionsCPESubscribe
PrestaShopCorpps_checkout >= 1.3.0, < 4.4.1 -
II. Public POCs for CVE-2025-61922
#POC DescriptionSource LinkShenlong Link
1Nonehttps://github.com/captaincookie34/Vulnerability-Playground-CVE-2025-61922POC Details
2A simple, educational proof-of-concept script demonstrating the zero-click account takeover vulnerability in the PrestaShop Checkout module (CVE-2025-61922).https://github.com/g0vguy/CVE-2025-61922-PoCPOC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC
III. Intelligence Information for CVE-2025-61922
Please Login to view more intelligence information
IV. Related Vulnerabilities
Same product: ps_checkout
Same vendor: PrestaShopCorp
Same weakness: CWE-287
V. Comments for CVE-2025-61922
Anonymous User
2026-01-15 06:08:53

Zaproxy alias impedit expedita quisquam pariatur exercitationem. Nemo rerum eveniet dolores rem quia dignissimos.

Leave a comment