GHSA-M5F5-28QR-9G9R prestashop/ps_facetedsearch: PHP Object Injection in faceted search cache allows unauthenticated RCE

Impact A PHP Object Injection vulnerability affects the PrestaShop module psfacetedsearch. The module rebuilds the selected search filters from the request URL. The value of a slider filter price or weight is taken from the URL without sufficient validation, then stored in an internal filter-bloc...

PT-2026-57368

Name of the Vulnerable Software and Affected Versions ps facetedsearch versions 3.0.0 through 4.0.3 Description An unauthenticated PHP Object Injection flaw exists in the ps facetedsearch module. The module rebuilds search filters from the request URL, where values for slider filters, specificall...

PT-2026-57361

Impact A PHP Object Injection vulnerability affects the PrestaShop module ps facetedsearch. The module rebuilds the selected search filters from the request URL. The value of a slider filter price or weight is taken from the URL without sufficient validation, then stored in an internal filter-blo...

PT-2020-18383

Name of the Vulnerable Software and Affected Versions PrestaShop module ps facetedsearch versions prior to 2.1.0 Description The issue concerns a reflected XSS related to social networks fields. The problem has been fixed in version 2.1.0. Recommendations For PrestaShop module ps facetedsearch...

PT-2020-18367

Name of the Vulnerable Software and Affected Versions PrestaShop module ps facetedsearch versions prior to 3.5.0 Description The issue is related to a reflected XSS with the url name parameter. The problem is fixed in version 3.5.0. Recommendations For PrestaShop module ps facetedsearch versions...