Description

A PHAR deserialization vulnerability in the component /themes/import of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.

Remediation

References

CVE-2025-25691

Related Vulnerabilities

WordPress Plugin Coupon Tab for DirectoryPress Multiple Cross-Site Scripting Vulnerabilities (0.2.0)

WordPress Plugin Sidebar Login Cross-Site Scripting (2.3.6)

WordPress Plugin SyntaxHighlighter Evolved Cross-Site Scripting (3.1.9)

MediaWiki Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2022-34750)

WordPress Improper Input Validation Vulnerability (CVE-2013-5738)

Severity

Medium

Classification

CVE-2025-25691 CWE-138 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities