Skip to content
CVE PROGRAM SOURCE RECORD6.5 Medium

CVE-2023-39530

PrestaShop vulnerable to file deletion via CustomerMessage

Description

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete files from the server via the CustomerMessage API. Version 8.1.1 contains a patch for this issue. There are no known workarounds.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

PrestaShop PrestaShop

  • < 8.1.1affected

References