CVE-2020-26224: access-control weakness in PrestaShop — submitReorder function
PrestaShop and CVE-2020-26224: a practical explanation of access-control weakness in submitReorder function, real-world impact…
// category
PrestaShop Security
Opinion, technical notes and research on web development, servers, performance and cyber security.
CVE-2020-15162: cross-site scripting (XSS) in PrestaShop — customer-uploaded files
PrestaShop and CVE-2020-15162: a practical explanation of cross-site scripting (XSS) in customer-uploaded files, real-world…
CVE-2020-15160: SQL injection in PrestaShop — catalog product editing
PrestaShop and CVE-2020-15160: a practical explanation of SQL injection in catalog product editing, real-world impact, affected…
CVE-2020-15161: cross-site scripting (XSS) in PrestaShop — contact form
PrestaShop and CVE-2020-15161: a practical explanation of cross-site scripting (XSS) in contact form, real-world impact…
CVE-2020-4074: authentication weakness in PrestaShop — authentication and administrative request validation
PrestaShop and CVE-2020-4074: a practical explanation of authentication weakness in authentication and administrative request…
CVE-2020-15082: access-control weakness in PrestaShop — dashboard settings
PrestaShop and CVE-2020-15082: a practical explanation of access-control weakness in dashboard settings, real-world impact…
CVE-2020-15083: cross-site scripting (XSS) in PrestaShop — image upload on the product page
PrestaShop and CVE-2020-15083: a practical explanation of cross-site scripting (XSS) in image upload on the product page…
CVE-2020-11074: cross-site scripting (XSS) in PrestaShop — AdminQuickAccesses shortcuts
PrestaShop and CVE-2020-11074: a practical explanation of cross-site scripting (XSS) in AdminQuickAccesses shortcuts, real-world…
CVE-2020-15079: access-control weakness in PrestaShop — carriers, modules and positions
PrestaShop and CVE-2020-15079: a practical explanation of access-control weakness in carriers, modules and positions, real-world…
CVE-2020-15080: information disclosure in PrestaShop — release archive contents
PrestaShop and CVE-2020-15080: a practical explanation of information disclosure in release archive contents, real-world impact…