Skip to content
CVE PROGRAM SOURCE RECORD6.8 Medium

CVE-2021-21302

CSV Injection via csv export

Description

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Injection vulnerability possible by using shop search keywords via the admin panel. The problem is fixed in 1.7.7.2

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PrestaShop PrestaShop

  • >= 1.5.0, < 1.7.7.2affected

References