Skip to content
CVE PROGRAM SOURCE RECORD9.1 Critical

CVE-2023-39526

PrestaShopSQL manager vulnerability (potential RCE)

Description

PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to remote code execution through SQL injection and arbitrary file write in the back office. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PrestaShop PrestaShop

  • < 1.7.8.10affected
  • >= 8.0.0, < 8.0.5affected
  • = 8.1.0affected

References