CVE-2026-124916: remote code execution in PrestaShop — debug_cookie_name and debug_cookie_value in Performance settings
PrestaShop and CVE-2026-124916: a practical explanation of remote code execution in debug_cookie_name and debug_cookie_value in…
// category
PrestaShop Core
Opinion, technical notes and research on web development, servers, performance and cyber security.
CVE-2026-84186: authentication weakness in PrestaShop — Tools::getRemoteAddr behind proxies or CDNs
PrestaShop and CVE-2026-84186: a practical explanation of authentication weakness in Tools::getRemoteAddr behind proxies or…
CVE-2026-14846: CSV formula injection in PrestaShop — address alias field and data export
PrestaShop and CVE-2026-14846: a practical explanation of CSV formula injection in address alias field and data export…
CVE-2026-44212: cross-site scripting (XSS) in PrestaShop — customer-service view and contact email
PrestaShop and CVE-2026-44212: a practical explanation of cross-site scripting (XSS) in customer-service view and contact email…
CVE-2026-33674: validation flaw in PrestaShop — validation framework
PrestaShop and CVE-2026-33674: a practical explanation of validation flaw in validation framework, real-world impact, affected…
CVE-2026-33673: cross-site scripting (XSS) in PrestaShop — back-office template variables
PrestaShop and CVE-2026-33673: a practical explanation of cross-site scripting (XSS) in back-office template variables…
CVE-2026-25597: account enumeration in PrestaShop — customer login response timing
PrestaShop and CVE-2026-25597: a practical explanation of account enumeration in customer login response timing, real-world…
CVE-2025-51586: account enumeration in PrestaShop — back-office employee password reset
PrestaShop and CVE-2025-51586: a practical explanation of account enumeration in back-office employee password reset, real-world…
CVE-2025-25691: remote code execution in PrestaShop — theme imports and PHAR files
PrestaShop and CVE-2025-25691: a practical explanation of remote code execution in theme imports and PHAR files, real-world…
CVE-2025-25692: remote code execution in PrestaShop — _getHeaders method and PHAR
PrestaShop and CVE-2025-25692: a practical explanation of remote code execution in _getHeaders method and PHAR, real-world…