Prestashop Security Vulnerabilities and Issues — Prestashop CVE List

Lucene search

PrestashopPrestashop

2 matches found

CVE•added 2018/01/13 5:29 a.m.•45 views

CVE-2018-5682

PrestaShop 1.7.2.4 allows user enumeration via the Reset Password feature, by noticing which reset attempts do not produce a "This account does not exist" error message.

5.3CVSS5.3AI score0.00232EPSS

CVE•added 2018/01/13 5:29 a.m.•33 views

CVE-2018-5681

PrestaShop 1.7.2.4 has XSS via source-code editing on the "Pages > Edit page" screen.

5.4CVSS5.2AI score0.00206EPSS