Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/prestashop/prestashop@1.7.5%2B2
purl pkg:composer/prestashop/prestashop@1.7.5%2B2
Tags Ghost
Next non-vulnerable version 8.2.4
Latest non-vulnerable version 9.1.0
Risk 3.1
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-g8wq-cvqc-9kfr
Aliases:
CVE-2019-11876
GHSA-6grv-hw8g-4gfm
Cross-site Scripting In PrestaShop, the `shop_country` parameter in the `install/index.Exploitation by a malicious actor requires the user to follow the initial stages of the setup (accepting terms and conditions) before executing the malicious link.
1.7.6+0
Affected by 0 other vulnerabilities.
1.7.6.0
Affected by 22 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-04T14:31:59.561766+00:00 GHSA Importer Affected by VCID-g8wq-cvqc-9kfr https://github.com/advisories/GHSA-6grv-hw8g-4gfm 38.1.0
2026-04-03T21:26:54.455388+00:00 GitLab Importer Affected by VCID-g8wq-cvqc-9kfr https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/prestashop/prestashop/CVE-2019-11876.yml 38.1.0
2026-04-01T13:08:11.178584+00:00 GithubOSV Importer Affected by VCID-g8wq-cvqc-9kfr https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/05/GHSA-6grv-hw8g-4gfm/GHSA-6grv-hw8g-4gfm.json 38.0.0