CVE-2026-33673 | BDVDB-2026-323264 Detail

Description#

PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 are vulnerable to stored Cross-Site Scripting (stored XSS) vulnerabilities in the BO. An attacker who can inject data into the database, via limited back-office access or a previously existing vulnerability, can exploit unprotected variables in back-office templates. Versions 8.2.5 and 9.1.0 contain a fix. No known workarounds are available.

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12026-03-26Record published in the CVE List.
2. Version 22026-03-27Most recent update recorded in the CVE List.