← Back

CVE-2026-33674

nvd nist
Published: Mar 26, 2026Modified: Jun 17, 2026

JSON object

Loading...
5.3
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitability: 3.9 / Impact: 1.4
Source: NVD

Description

PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 improperly use the validation framework. Versions 8.2.5 and 9.1.0 contain a fix. No known workarounds are available.

Affected (2)

Prestashop
1 product
Prestashop
Configuration A
2 vulnerable
Vulnerable SoftwareAffected Versions
Prestashop
Prestashop
Before 8.2.5
Prestashop
From 9.0.0 to 9.1.0

Related CWEs

CWE-1173
Improper Use of Validation Framework
The product does not use, or incorrectly uses, an input validation framework that is provided by the source language or an independent library.

References (3)

Source: security-advisories@github.com
Release Notes
Source: security-advisories@github.com
Release Notes
Source: security-advisories@github.com
Vendor Advisory

Timeline

No history available yet.