Description
PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Injection vulnerability possible by using shop search keywords via the admin panel. The problem is fixed in 1.7.7.2
Remediation
References
Related Vulnerabilities
Moodle Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2009-4298)
WordPress Plugin UpdraftPlus WordPress Backup Multiple Vulnerabilities (1.16.58)
PHP Other Vulnerability (CVE-2015-0231)
WordPress Plugin Passster-Password Protection Security Bypass (3.5.5.8)
PHP Integer Overflow or Wraparound Vulnerability (CVE-2024-11236)