Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%

PrestaShop — Vulnerabilities & Security Advisories 57

All 57 CVE vulnerabilities found in PrestaShop, with AI-generated Chinese analysis, references, and POCs.

This page aggregates vulnerabilities for PrestaShop, an open-source e-commerce platform, focusing on common weakness classes and associated product tags. It collects security advisories and flaw reports for PrestaShop releases, covering the historical range from early public disclosures through the most recent updates. Readers can use this index to track the vendor’s published advisories, analyze the prevalence of specific weakness types such as SQL injection or cross-site scripting, and review the complete vulnerability history for the PrestaShop product line to identify recurring security patterns over time.

Vendor: PrestaShop

CVE ID Title CVSS Severity Published
CVE-2026-84186 Incorrect access control in PrestaShop CWE-290 6.9 Medium 2026-09-07
CVE-2026-44212 PrestaShop: Stored XSS executable in customer service view CWE-79 9.3 Critical 2026-05-14
CVE-2026-33674 PrestaShop: Improper Use of Validation Framework CWE-1173 2.0 Low 2026-03-26
CVE-2026-33673 PrestaShop has multiple stored XSS vulnerabilities via unprotected Template variables CWE-79 7.7 High 2026-03-26
CVE-2026-25597 PrestaShop has a time based enumeration in FO login form CWE-208 5.3 Medium 2026-02-06
CVE-2025-1230 Cross-Site Scripting (XSS) vulnerability in Prestashop CWE-79 4.8 Medium 2025-02-12
CVE-2024-34717 Anonymous PrestaShop customer can download other customers' invoices CWE-200 5.3 Medium 2024-05-14
CVE-2024-34716 PrestaShop vulnerable to XSS via customer contact form in FO, through file upload CWE-79 9.7 Critical 2024-05-14
CVE-2024-26129 Prestashop vulnerable to path disclosure in JavaScript variable CWE-22 5.8 Medium 2024-02-19
CVE-2024-21628 XSS can be stored in DB from "add a message form" in order detail page (FO) CWE-79 5.4 Medium 2024-01-02
CVE-2024-21627 Some attribute not escaped in Validate::isCleanHTML method CWE-79 8.1 High 2024-01-02
CVE-2023-43664 Employee without any access rights can list all installed modules in Prestashop CWE-269 4.3 Medium 2023-09-28
CVE-2023-43663 Improper Privilege Management in Prestashop CWE-269 6.3 Medium 2023-09-28
CVE-2023-39530 PrestaShop vulnerable to file deletion via CustomerMessage CWE-20 6.5 Medium 2023-08-07
CVE-2023-39529 PrestaShop vulnerable to file deletion via attachment API CWE-20 6.7 Medium 2023-08-07
CVE-2023-39528 PrestaShop vulnerable to file reading through path traversal CWE-22 6.8 Medium 2023-08-07
CVE-2023-39527 PrestaShop XSS vulnerability through Validate::isCleanHTML method CWE-79 8.3 High 2023-08-07
CVE-2023-39526 PrestaShopSQL manager vulnerability (potential RCE) CWE-89 9.1 Critical 2023-08-07
CVE-2023-39525 PrestaShop vulnerable to path traversal CWE-22 6.5 Medium 2023-08-07
CVE-2023-39524 PrestaShop vulnerable to boolean SQL injection in search product in BO CWE-89 6.7 Medium 2023-08-07
CVE-2023-30839 PrestaShop vulnerable to SQL filter bypass leading to arbitrary write requests using "SQL Manager" CWE-89 10.0 Critical 2023-04-25
CVE-2023-30838 PrestaShop vulnerable to possible XSS injection through Validate::isCleanHTML method CWE-79 8.6 High 2023-04-25
CVE-2023-30545 PrestaShop arbitrary file read vulnerability CWE-89 7.7 High 2023-04-25
CVE-2023-25170 PrestaShop has possible CSRF token fixation CWE-352 5.0 Medium 2023-03-13
CVE-2022-46158 Potential Information exposure in the upload directory in PrestaShop CWE-200 5.3 Medium 2022-12-08
CVE-2022-31181 Remote code execution in prestashop CWE-89 9.8 Critical 2022-08-01
CVE-2022-21686 Server Side Twig Template Injection in PrestaShop CWE-94 9.0 Critical 2022-01-26
CVE-2021-43789 Blind SQLi using Search filters in PrestaShop CWE-89 7.5 High 2021-12-07
CVE-2021-21398 Possible XSS injection through DataColumn Grid class CWE-79 5.4 Medium 2021-03-30
CVE-2021-21308 Improper session management for soft logout CWE-287 6.1 Medium 2021-02-26

All 57 known CVE vulnerabilities affecting PrestaShop with full Chinese analysis, references, and POCs where available.