PT-2026-140429

PrestaShop contains an authenticated PHP code injection vulnerability in the back-office Performance debug-mode configuration. A back-office user with permission to modify debug settings can supply a crafted debug cookie name or debug cookie value that is written without sufficient escaping into ...