Description

PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to remote code execution through SQL injection and arbitrary file write in the back office. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.

Remediation

References

CVE-2023-39526

Related Vulnerabilities

Magento Authorization Bypass Through User-Controlled Key Vulnerability (CVE-2019-7890)

Phusion Passenger Incorrect Permission Assignment for Critical Resource Vulnerability (CVE-2018-12028)

WordPress Plugin Simple Sitemap-Create a Responsive HTML Sitemap Security Bypass (3.5.4)

Beego Framework Incorrect Default Permissions Vulnerability (CVE-2019-16355)

PHP Other Vulnerability (CVE-2014-4670)

Severity

Critical

Classification

CVE-2023-39526 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities