anonhaven
Ad

CVE-2026-33674

LOW CVSS 3.1: 2.0 EPSS 0.09%
Updated Mar 30, 2026
Prestashop
Parameter Value
CVSS 2.0 (LOW)
Affected Versions before 8.2.5
Type CWE-1173
Vendor Prestashop
Public PoC No

PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 improperly use the validation framework. Versions 8.2.5 and 9.1.0 contain a fix.

No known workarounds are available.

Attack Parameters

Attack Vector
Network
Can be exploited remotely
Attack Complexity
High
Difficult to exploit
Privileges Required
High
Admin privileges needed
User Interaction
Required
User action required

Impact Assessment

Confidentiality
None
No data leak
Integrity
Low
Partial data modification
Availability
None
No disruption

CVSS Vector v3.1

Weakness Type (CWE)

CWE-1173

References 3

https://github.com/PrestaShop/PrestaShop/releases/tag/8.2.5
security-advisories@github.com
https://github.com/PrestaShop/PrestaShop/releases/tag/9.1.0
security-advisories@github.com
https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-283w-xf3q-788v
security-advisories@github.com
Share Post Share Share Share

Related Vulnerabilities

CVE-2026-33673

Prestashop

7.6