Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:composer/prestashop/prestashop@1.7.8%2B2
purl pkg:composer/prestashop/prestashop@1.7.8%2B2
Tags Ghost
Next non-vulnerable version 8.2.4
Latest non-vulnerable version 9.1.0
Risk 4.5
Vulnerabilities affecting this package (1)
Vulnerability Summary Fixed by
VCID-ghu1-c6e6-pudm
Aliases:
CVE-2022-21686
GHSA-mrq4-7ch7-2465
Improper Control of Generation of Code ('Code Injection') PrestaShop is an Open Source e-commerce platform. Starting with version 1.7.0.0 and ending with version 1.7.8.3, an attacker is able to inject twig code inside the back office when using the legacy layout. The problem is fixed in version 1.7.8.3. There are no known workarounds.
1.7.8+3
Affected by 0 other vulnerabilities.
1.7.8.3
Affected by 16 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-04-01T16:02:51.304284+00:00 GHSA Importer Fixing VCID-4b1q-fwjf-2ffs https://github.com/advisories/GHSA-qv6h-pcf2-2w3g 38.0.0
2026-04-01T15:59:25.363557+00:00 GHSA Importer Affected by VCID-ghu1-c6e6-pudm https://github.com/advisories/GHSA-mrq4-7ch7-2465 38.0.0
2026-04-01T15:59:04.989452+00:00 GHSA Importer Fixing VCID-bmyy-gqbc-ybhz https://github.com/advisories/GHSA-6xxj-gcjq-wgf4 38.0.0
2026-04-01T13:07:23.342815+00:00 GithubOSV Importer Fixing VCID-4b1q-fwjf-2ffs https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2022/07/GHSA-qv6h-pcf2-2w3g/GHSA-qv6h-pcf2-2w3g.json 38.0.0
2026-04-01T13:01:07.745257+00:00 GithubOSV Importer Fixing VCID-bmyy-gqbc-ybhz https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2021/12/GHSA-6xxj-gcjq-wgf4/GHSA-6xxj-gcjq-wgf4.json 38.0.0
2026-04-01T12:49:21.038477+00:00 GitLab Importer Affected by VCID-ghu1-c6e6-pudm https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/prestashop/prestashop/CVE-2022-21686.yml 38.0.0
2026-04-01T12:49:08.371445+00:00 GitLab Importer Fixing VCID-bmyy-gqbc-ybhz https://gitlab.com/gitlab-org/advisories-community/-/blob/main/packagist/prestashop/prestashop/CVE-2021-43789.yml 38.0.0