Search for packages
| purl | pkg:composer/prestashop/prestashop@9.0.0-alpha.1 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-cf1h-m5xj-mfc5
Aliases: CVE-2026-25597 GHSA-67v7-3g49-mxh2 |
PrestaShop affected by time based enumeration in FO login form ### Impact A time-based user enumeration vulnerability in the user authentication functionality of PrestaShop. This vulnerability allows an attacker to determine whether a customer account exists in the system by measuring response times. ### Patches 8.2.4 and 9.0.3 ### Workarounds none ### References Found by Lam Yiu Tung |
Affected by 0 other vulnerabilities. Affected by 0 other vulnerabilities. |
|
VCID-s53g-k7gw-yyd4
Aliases: CVE-2026-33673 GHSA-35pf-37c6-jxjv |
PrestaShop has multiple stored XSS vulnerabilities via unprotected Template variables ### Impact Multiple stored Cross-Site Scripting (stored XSS) vulnerabilities in the BO: an attacker who can inject data into the database, via limited back-office access or a previously existing vulnerability, can exploit unprotected variables in back-office templates. ### Patches Patched on 8.2.5 and 9.1.0 ### Workarounds None ### References None |
Affected by 0 other vulnerabilities. |
|
VCID-vsng-njkm-hydv
Aliases: CVE-2026-33674 GHSA-283w-xf3q-788v |
PrestaShop: Improper Use of Validation Framework ### Impact Fix improper use of validation framework ### Patches Patched in 8.2.5 and 9.1.0 ### Workarounds None ### References none |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| This package is not known to fix vulnerabilities. | ||