PrestaShop vulnerabilities
Filtered catalog for this technology stack. Use KEV and EPSS sorting to prioritize — then open each CVE for remediation and version matching.
15 matching records
- UnknownExternal Control of File Name or PathPatch nowKEVEPSS 0.99%Sep 29, 2026
- Unknownprestashop poststaticfooter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 32.41%Jul 21, 2025
- Unknownleotheme leocustomajax Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.85%Jun 8, 2025
- Unknownapollotheme ap_pagebuilder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 13.65%Aug 6, 2024
- Unknownattribute_wizard_project attribute_wizard Unrestricted Upload of File with Dangerous TypePatch nowKEVEPSS 12.33%Jun 28, 2024
- UnknownPromokit.eu PrestaShop pkfacebook SQL InjectionPatch nowKEVEPSS 10.09%Jun 24, 2024
- Unknownjoommasters jms_blog Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 58.74%Jun 22, 2024
- Unknownndkdesign ndk_steppingpack Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 50.30%Jun 19, 2024
- Unknowntshirtecommerce custom_product_designer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.57%Jun 1, 2023
- Unknowntshirtecommerce custom_product_designer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')Patch nowKEVEPSS 3.55%Jun 1, 2023
- Critical9.8idnovate popup_module_\(on_entering\,_exit_popup\,_add_product\)_and_newsletter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.02%Apr 12, 2023
- Unknowntshirtecommerce custom_product_designer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.30%Mar 21, 2023
- Unknowntshirtecommerce custom_product_designer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 3.30%Mar 21, 2023
- Unknownprestashop prestashop Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')Patch nowKEVEPSS 6.72%Jul 22, 2022
- Critical9.8smartdatasoft smartblog Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')Patch nowKEVEPSS 74.49%Aug 24, 2021
Sort
15 records