CVE-2025-25692

46th percentile - higher than 46% of all known CVEs

A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.

The risk for the organization includes full compromise of the PrestaShop server, potentially leading to customer data theft, store content modification, or further attacks on the infrastructure.

Immediately update PrestaShop to the latest available version that includes a fix for this vulnerability. Until then, restrict access to the admin panel and monitor for unusual POST requests.