Prestashop
Approved changes feed: RSS · Atom
cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Prestashop (236a7260-6e18-5f0f-b33a-a013be210d8c) |
|---|---|
| Product | Prestashop (c9530676-cecc-5a16-afb2-ff937ae35f7e) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:composer/prestashop/prestashop |
purl2cpe | 2026-06-01 10:15:07.971291 |
pkg:docker/prestashop/prestashop |
purl2cpe | 2026-06-01 10:15:07.971293 |
pkg:github/prestashop/prestashop |
purl2cpe | 2026-06-01 10:15:07.971294 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-44212 |
vulnerable | 2026-06-08 08:03:18.130512 |
PrestaShop: Stored XSS executable in customer service view
CRITICAL (9.3)
PrestaShop is an open source e-commerce web application. Prior to 8.2.6 and 9.1.1, there is a stored Cross-Site Scripting (XSS) vulnerability in the PrestaShop back-office Customer Service view. An unauthenticated attacker can submit the public Contact Us form with a malicious email address. The payload is stored in the database and executed when a back-office employee opens the affected customer thread, enabling session hijacking and full back-office takeover. This vulnerability is fixed in 8.2.6 and 9.1.1.
Published: 2026-05-14T20:44:08.152Z
Updated: 2026-05-15T13:34:09.904Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33674 |
vulnerable | 2026-06-08 07:59:10.579941 |
PrestaShop: Improper Use of Validation Framework
LOW (2)
PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 improperly use the validation framework. Versions 8.2.5 and 9.1.0 contain a fix. No known workarounds are available.
Published: 2026-03-26T21:42:33.590Z
Updated: 2026-03-30T11:44:22.497Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-33673 |
vulnerable | 2026-06-08 07:59:10.579589 |
PrestaShop has multiple stored XSS vulnerabilities via unprotected Template variables
HIGH (7.7)
PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 are vulnerable to stored Cross-Site Scripting (stored XSS) vulnerabilities in the BO. An attacker who can inject data into the database, via limited back-office access or a previously existing vulnerability, can exploit unprotected variables in back-office templates. Versions 8.2.5 and 9.1.0 contain a fix. No known workarounds are available.
Published: 2026-03-26T21:41:13.249Z
Updated: 2026-03-27T20:27:40.683Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2026-25597 |
vulnerable | 2026-06-08 07:53:20.076584 |
PrestaShop has a time based enumeration in FO login form
MEDIUM (5.3)
PrestaShop is an open source e-commerce web application. Prior to 8.2.4 and 9.0.3, there is a time-based user enumeration vulnerability in the user authentication functionality of PrestaShop. This vulnerability allows an attacker to determine whether a customer account exists in the system by measuring response times. This vulnerability is fixed in 8.2.4 and 9.0.3.
Published: 2026-02-06T20:47:24.793Z
Updated: 2026-02-09T15:27:54.047Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-51586 |
vulnerable | 2026-06-08 07:31:11.248118 |
Details available
An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature.
Published: 2025-09-08T00:00:00.000Z
Updated: 2025-09-08T17:50:16.864Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2025-1230 |
vulnerable | 2026-06-08 07:08:35.877301 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-41651 |
vulnerable | 2026-06-08 06:43:54.798083 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34717 |
vulnerable | 2026-06-08 06:37:34.905196 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-34716 |
vulnerable | 2026-06-08 06:37:34.903816 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-26129 |
vulnerable | 2026-06-08 06:31:24.847249 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-25845 |
vulnerable | 2026-06-08 06:31:23.909356 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21628 |
vulnerable | 2026-06-08 06:27:36.246756 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2024-21627 |
vulnerable | 2026-06-08 06:27:36.246296 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43664 |
vulnerable | 2026-06-08 06:12:37.683810 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-43663 |
vulnerable | 2026-06-08 06:12:37.683367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39530 |
vulnerable | 2026-06-08 06:09:37.655416 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39529 |
vulnerable | 2026-06-08 06:09:37.655013 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39528 |
vulnerable | 2026-06-08 06:09:37.654680 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39527 |
vulnerable | 2026-06-08 06:09:37.654243 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39526 |
vulnerable | 2026-06-08 06:09:37.652387 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39525 |
vulnerable | 2026-06-08 06:09:37.651999 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-39524 |
vulnerable | 2026-06-08 06:09:37.651487 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-31672 |
vulnerable | 2026-06-08 06:04:43.424174 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30839 |
vulnerable | 2026-06-08 06:04:41.191284 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30838 |
vulnerable | 2026-06-08 06:04:41.190911 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30545 |
vulnerable | 2026-06-08 06:04:39.848873 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30151 |
vulnerable | 2026-06-08 06:02:43.871256 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-25170 |
vulnerable | 2026-06-08 05:56:08.625756 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-46158 |
vulnerable | 2026-06-08 05:50:38.263696 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-31181 |
vulnerable | 2026-06-08 05:43:40.342964 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-21686 |
vulnerable | 2026-06-08 05:40:02.003009 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-43789 |
vulnerable | 2026-06-08 05:36:44.262303 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21398 |
vulnerable | 2026-06-08 05:29:11.817271 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21308 |
vulnerable | 2026-06-08 05:29:11.589522 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-21302 |
vulnerable | 2026-06-08 05:29:11.581209 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5293 |
vulnerable | 2026-06-08 05:26:41.682484 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5288 |
vulnerable | 2026-06-08 05:26:41.671651 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5287 |
vulnerable | 2026-06-08 05:26:41.671312 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5286 |
vulnerable | 2026-06-08 05:26:41.670886 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5285 |
vulnerable | 2026-06-08 05:26:41.670531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5279 |
vulnerable | 2026-06-08 05:26:41.658314 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5278 |
vulnerable | 2026-06-08 05:26:41.657944 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5276 |
vulnerable | 2026-06-08 05:26:41.654527 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5272 |
vulnerable | 2026-06-08 05:26:41.650416 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5271 |
vulnerable | 2026-06-08 05:26:41.650098 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5270 |
vulnerable | 2026-06-08 05:26:41.649779 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5269 |
vulnerable | 2026-06-08 05:26:41.649427 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5265 |
vulnerable | 2026-06-08 05:26:41.644050 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5264 |
vulnerable | 2026-06-08 05:26:41.643610 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5250 |
vulnerable | 2026-06-08 05:26:41.602922 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-4074 |
vulnerable | 2026-06-08 05:25:58.813470 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-26224 |
vulnerable | 2026-06-08 05:23:50.904837 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15162 |
vulnerable | 2026-06-08 05:19:25.401703 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15161 |
vulnerable | 2026-06-08 05:19:25.401343 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15160 |
vulnerable | 2026-06-08 05:19:25.400888 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15083 |
vulnerable | 2026-06-08 05:19:25.232649 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15082 |
vulnerable | 2026-06-08 05:19:25.232320 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15081 |
vulnerable | 2026-06-08 05:19:25.231991 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15080 |
vulnerable | 2026-06-08 05:19:25.231528 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-15079 |
vulnerable | 2026-06-08 05:19:25.231105 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11074 |
vulnerable | 2026-06-08 05:16:36.405388 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13461 |
vulnerable | 2026-06-08 05:12:42.255826 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8824 |
vulnerable | 2026-06-08 05:12:06.483624 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-8823 |
vulnerable | 2026-06-08 05:12:06.483206 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7491 |
vulnerable | 2026-06-08 05:12:03.751713 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20717 |
vulnerable | 2026-06-08 05:11:27.776163 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19355 |
vulnerable | 2026-06-08 05:11:15.649830 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19126 |
vulnerable | 2026-06-08 05:11:15.376388 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19125 |
vulnerable | 2026-06-08 05:11:15.376015 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-19124 |
vulnerable | 2026-06-08 05:11:15.375341 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-13784 |
vulnerable | 2026-06-08 05:10:51.757812 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-10942 |
not_vulnerable | 2026-06-08 05:10:37.505617 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-1175 |
vulnerable | 2026-06-08 05:06:25.113251 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4792 |
vulnerable | 2026-06-08 05:04:49.687697 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2013-4791 |
vulnerable | 2026-06-08 05:04:49.687322 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-6641 |
vulnerable | 2026-06-08 05:03:01.375942 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-2517 |
vulnerable | 2026-06-08 05:02:04.722672 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2012-20001 |
vulnerable | 2026-06-08 05:00:52.294557 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-4544 |
vulnerable | 2026-06-08 04:59:31.818780 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5791 |
vulnerable | 2026-06-08 04:50:53.122113 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.