Published: 07/08/2023 Updated: 09/08/2023

CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9

VMScore: 0

PrestaShop is an open source e-commerce web application. Versions before 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to remote code execution through SQL injection and arbitrary file write in the back office. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.

Vulnerable Product	Search on Vulmon	Subscribe to Product
prestashop prestashop 8.1.0
prestashop prestashop

Prestashop fix vulnerability CVE-2023-39526 & CVE-2023-39527

fix CVE 2023_39526 (GHSA-gf46-prm4-56pc) githubcom/advisories/GHSA-gf46-prm4-56pc CVE 2023_39527 (GHSA-xw2r-f8xv-c8xp) githubcom/advisories/GHSA-xw2r-f8xv-c8xp Prestashop fix vulnerability CVE-2023-39526 & CVE-2023-39527

CWE-89 https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-gf46-prm4-56pc https://github.com/PrestaShop/PrestaShop/commit/817847e2347844a9b6add017581f1932bcd28c09 https://nvd.nist.gov https://github.com/dnkhack/fixcve2023_39526_2023_39527

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2023-39526

Vulnerability Summary

Vulnerability Trend

Github Repositories

References

Vulmon Search

About

Products

Connect