Description

PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to remote code execution through SQL injection and arbitrary file write in the back office. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.

Remediation

References

CVE-2023-39526

Related Vulnerabilities

WordPress Plugin Cms Pack TimThumb Arbitrary File Upload (1.3)

PostgreSQL Permissions, Privileges, and Access Controls Vulnerability (CVE-2016-0766)

Jenkins Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2017-17383)

WordPress Plugin Content Copy Protection & Prevent Image Save Cross-Site Request Forgery (1.3)

Liferay Portal Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-37940)

Severity

Critical

Classification

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Tags

Missing Update Known Vulnerabilities CWE-138 CVE-2023-39526