CVE-2023-39524

MediumCVSS 6.7

Published: 07/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 19/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.55%

42th percentile - higher than 42% of all known CVEs

Summary

PrestaShop prior to version 8.1.1 had an SQL injection vulnerability in the product search field on the product page in the admin panel. Version 8.1.1 includes a patch for this issue.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the database and leakage of sensitive information. Organizations using the affected version should update their software as soon as possible.

Recommendation

It is recommended to update PrestaShop to version 8.1.1 or later to mitigate this vulnerability. The lack of known workarounds means that updating is the only way to secure the system.

Original NVD description (English source)

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, SQL injection possible in the product search field, in BO's product page. Version 8.1.1 contains a patch for this issue. There are no known workarounds.