CVE-2025-1230: cross-site scripting (XSS) in PrestaShop — administration link parameter
PrestaShop and CVE-2025-1230: a practical explanation of cross-site scripting (XSS) in administration link parameter, real-world…
// category
PrestaShop Security
Opinion, technical notes and research on web development, servers, performance and cyber security.
CVE-2024-36626: validation flaw in PrestaShop — math_round function in Tools.php
PrestaShop and CVE-2024-36626: a practical explanation of validation flaw in math_round function in Tools.php, real-world…
CVE-2024-41651: remote code execution in PrestaShop — module upgrades over the network
PrestaShop and CVE-2024-41651: a practical explanation of remote code execution in module upgrades over the network, real-world…
CVE-2024-34717: access-control weakness in PrestaShop — front-office invoice download
PrestaShop and CVE-2024-34717: a practical explanation of access-control weakness in front-office invoice download, real-world…
CVE-2024-34716: cross-site scripting (XSS) in PrestaShop — contact form file attachment
PrestaShop and CVE-2024-34716: a practical explanation of cross-site scripting (XSS) in contact form file attachment, real-world…
CVE-2024-26129: information disclosure in PrestaShop — JavaScript variable containing server path
PrestaShop and CVE-2024-26129: a practical explanation of information disclosure in JavaScript variable containing server path…
CVE-2024-21628: cross-site scripting (XSS) in PrestaShop — front-office order messages
PrestaShop and CVE-2024-21628: a practical explanation of cross-site scripting (XSS) in front-office order messages, real-world…
CVE-2024-21627: cross-site scripting (XSS) in PrestaShop — HTML attributes in Validate::isCleanHTML
PrestaShop and CVE-2024-21627: a practical explanation of cross-site scripting (XSS) in HTML attributes in…
CVE-2023-43664: access-control weakness in PrestaShop — AJAX module listing
PrestaShop and CVE-2023-43664: a practical explanation of access-control weakness in AJAX module listing, real-world impact…
CVE-2023-43663: access-control weakness in PrestaShop — module uninstall and disable operations
PrestaShop and CVE-2023-43663: a practical explanation of access-control weakness in module uninstall and disable operations…