Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo

E-Commerce

PrestaShop

PrestaShop e-Commerce Solution was built to take advantage of essential Web 2.0 innovations such as dynamic AJAX-powered features and next-generation ergonomy. PrestaShop guides users through your product catalog intelligently and effortlessly turning intrigued visitors into paying customers.

Official Site:

https://www.prestashop.com/en

Severity Summary:

Critical: 23 High: 14 Medium: 49
Reference
Title
Severity
CVE-2020-15079
PrestaShop Improper Authentication Vulnerability
Medium
CVE-2020-11074
PrestaShop Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-5293
PrestaShop Incorrect Authorization Vulnerability
Medium
CVE-2020-5288
PrestaShop Incorrect Authorization Vulnerability
Medium
CVE-2020-5287
PrestaShop Incorrect Authorization Vulnerability
Medium
CVE-2020-5286
PrestaShop Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-5285
PrestaShop Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-5279
PrestaShop Incorrect Authorization Vulnerability
Medium
CVE-2020-5278
PrestaShop Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-5272
PrestaShop Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2011-4545
PrestaShop Improper Control of Generation of Code (Code Injection) Vulnerability
Medium
CVE-2020-5271
PrestaShop Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-5270
PrestaShop URL Redirection to Untrusted Site (Open Redirect) Vulnerability
Medium
CVE-2020-5269
PrestaShop Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-5265
PrestaShop Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-5264
PrestaShop Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2020-5250
PrestaShop Files or Directories Accessible to External Parties Vulnerability
Medium
CVE-2020-6632
PrestaShop Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2018-5682
PrestaShop Exposure of Sensitive Information to an Unauthorized Actor Vulnerability
Medium
CVE-2018-5681
PrestaShop Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2013-4792
PrestaShop Cross-Site Request Forgery (CSRF) Vulnerability
Medium
CVE-2012-2517
PrestaShop Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2019-11876
PrestaShop Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2015-1175
PrestaShop Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2012-6641
PrestaShop Improper Neutralization of Input During Web Page Generation (Cross-site Scripting) Vulnerability
Medium
CVE-2024-34717
PrestaShop Vulnerability
Medium