CVE-2026-124916

PrestaShop contains an authenticated PHP code injection vulnerability within the back-office Performance debug-mode configuration . A back-office user authorized to modify debug settings can exploit the lack of sufficient escaping when providing debug_cookie_name or debug_cookie_value inputs. The...