CVE-2023-39530

MediumCVSS 6.5

Published: 07/08/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.74%

50th percentile - higher than 50% of all known CVEs

Summary

PrestaShop is an open source e-commerce application. Prior to version 8.1.1, it was possible to delete files from the server via the CustomerMessage API.

Risk Assessment

The organization may be at risk of data loss or deletion of important files, potentially leading to significant operational disruptions.

Recommendation

It is recommended to upgrade to version 8.1.1 or later to patch this vulnerability.

Original NVD description (English source)

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, it is possible to delete files from the server via the CustomerMessage API. Version 8.1.1 contains a patch for this issue. There are no known workarounds.