Description
PrestaShop 1.6.x before 1.6.1.23 and 1.7.x before 1.7.4.4 allows remote attackers to execute arbitrary code via a file upload.
Remediation
References
Related Vulnerabilities
Joomla CVE-2006-4472 Vulnerability (CVE-2006-4472)
WordPress Plugin JobSearch WP Job Board Cross-Site Scripting (1.5.4)
WordPress Plugin amtyThumb posts Cross-Site Scripting (8.1.3)
WordPress Plugin One Click SSL Cross-Site Request Forgery (1.4.6)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2013-6455)