CVE-2023-28843

PrestaShop/paypal is an open source module for the PrestaShop web commerce ecosystem which provides paypal payment support. A SQL injection vulnerability found in the PrestaShop paypal module from release from 3.12.0 to and including 3.16.3 allow a remote attacker to gain privileges, modify data,...

CVE-2019-19594

The CVE-2019-19594 entry applies to PrestaShop 1.6 and 1.7 with the RESET.PRO Adobe Stock API Integration, via the file reset/modules/fotoliaFoto/multi_upload.php. The vulnerability allows remote code execution by uploading a PHP file, indicating a file-upload handling flaw in the integration com...