Description

PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to remote code execution through SQL injection and arbitrary file write in the back office. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.

Remediation

References

CVE-2023-39526

Related Vulnerabilities

Serendipity Other Vulnerability (CVE-2005-3129)

WordPress Plugin Theme My Login Local File Inclusion (6.3.9)

WordPress Plugin Contact Bank-Contact Form Builder for WordPress Cross-Site Scripting (2.0.69)

TYPO3 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Vulnerability (CVE-2019-19850)

WordPress Plugin NEX-Forms-The Ultimate WordPress Form Builder Security Bypass (7.8.7)

Severity

Critical

Classification

CVE-2023-39526 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities