Catalog
Findings
Filter by record type (vulnerability, fix, incident, intelligence, research), severity, source, stack, and weakness.
- UnknownExternal Control of File Name or PathKEVEPSS 1.0%Sep 29, 2026
- High7.5An issue in prestashop upsshipping all versions through at least 2.4.0 allows a remote attacker to obtain sensitive information via the /modules/upsshipping/logs/, and…EPSS 0.5%May 18, 2026
- Critical9.3PrestaShop is an open source e-commerce web application.EPSS 0.4%May 14, 2026
- Medium5.3PrestaShop is an open source e-commerce web application.EPSS 0.3%Mar 26, 2026
- Medium5.4PrestaShop is an open source e-commerce web application.EPSS 0.4%Mar 26, 2026
- Unknownidnovate popup_module_\(on_entering\,_exit_popup\,_add_product\)_and_newsletter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVFeb 15, 2026
- Unknownsmartdatasoft smartblog Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVSep 11, 2025
- Unknownprestashop poststaticfooter Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVJul 21, 2025
- Unknownleotheme leocustomajax Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVJun 8, 2025
- Unknownapollotheme ap_pagebuilder Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVAug 6, 2024
- Unknownattribute_wizard_project attribute_wizard Unrestricted Upload of File with Dangerous TypeKEVJun 28, 2024
- UnknownPromokit.eu PrestaShop pkfacebook SQL InjectionKEVJun 24, 2024
- Unknownjoommasters jms_blog Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVJun 22, 2024
- Unknownndkdesign ndk_steppingpack Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVJun 19, 2024
- Unknowntshirtecommerce custom_product_designer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVJun 1, 2023
- Unknowntshirtecommerce custom_product_designer Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')KEVJun 1, 2023
- Unknowntshirtecommerce custom_product_designer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVMar 21, 2023
- Unknowntshirtecommerce custom_product_designer Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')KEVMar 21, 2023
- Unknownprestashop prestashop Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection')KEVJul 22, 2022
19 records · page 1 of 1
PreviousNext