Description PrestaShop 1.5.5 vulnerable to privilege escalation via a Salesman account via upload module Remediation References CVE-2013-6295 Related Vulnerabilities phpMyFAQ Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2023-1878) WordPress Plugin Car Seller-Auto Classifieds Script SQL Injection (2.1.0) Chamilo Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2025-59543) WordPress Plugin Double Opt-In for Download SQL Injection (2.0.9) ReviveAdserver Improper Control of Generation of Code ('Code Injection') Vulnerability (CVE-2026-50741) Severity Critical Classification CVE-2013-6295 CWE-269 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H Tags Missing Update Known Vulnerabilities