CVE-2026-124916

PrestaShop contains an authenticated PHP code injection vulnerability within the back-office Performance debug-mode configuration . A back-office user authorized to modify debug settings can exploit the lack of sufficient escaping when providing debug_cookie_name or debug_cookie_value inputs. The...

CVE-2026-124916

PrestaShop contains an authenticated PHP code injection vulnerability in the back-office Performance debug-mode configuration. A back-office user with permission to modify debug settings can supply a crafted debugcookiename or debugcookievalue that is written without sufficient escaping into a PH...