Description PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to delete an image directory. Remediation References CVE-2018-19125 Related Vulnerabilities WordPress Plugin Search Everything SQL Injection (8.1.6) WordPress Plugin Scroll Baner Cross-Site Request Forgery (1.0) WordPress Plugin FunCaptcha-Anti-Spam CAPTCHA Multiple Cross-Site Scripting Vulnerabilities (0.4.3) MySQL CVE-2016-5444 Vulnerability (CVE-2016-5444) Plone CMS Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-1000482) Severity High Classification CVE-2018-19125 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N Tags Missing Update Known Vulnerabilities