Description

A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.

Remediation

References

CVE-2025-25692

Related Vulnerabilities

fancybox Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2015-1494)

WordPress Plugin JobBoardWP-Job Board Listings and Submissions Cross-Site Scripting (1.0.7)

WordPress 4.2.x Arbitrary File Deletion Vulnerability (4.2 - 4.2.20)

WordPress Plugin Wrapper Link Elementor Malicious Code (1.0.3)

Apache Traffic Server Regular Expression without Anchors Vulnerability (CVE-2026-22068)

Severity

Medium

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-502 CVE-2025-25692