CVE-2021-21302

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Injection vulnerability possible by using shop search keywords via the admin panel. The problem is fixed in 1.7.7.2

• CWE-78
• CWE-1236

• https://github.com/PrestaShop/PrestaShop/commit/782b1368aa4e94dafe28f57485bffbd8893fbb1ePatch, Third Party Advisory
• https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.7.2Release Notes, Third Party Advisory
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-2rw4-2p99-cmx9Third Party Advisory
• https://github.com/PrestaShop/PrestaShop/commit/782b1368aa4e94dafe28f57485bffbd8893fbb1ePatch, Third Party Advisory
• https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.7.2Release Notes, Third Party Advisory
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-2rw4-2p99-cmx9Third Party Advisory

Published

Feb 26, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-21297Node-Red is a low-code programming for event-driven applicat…6.5
• CVE-2021-21298Node-Red is a low-code programming for event-driven applicat…6.5
• CVE-2021-21299hyper is an open-source HTTP library for Rust (crates.io). I…8.1
• CVE-2021-2130Vulnerability in the Oracle VM VirtualBox product of Oracle …4.4
• CVE-2021-21300Git is an open-source distributed revision control system. I…7.5
• CVE-2021-21301Wire is an open-source collaboration platform. In Wire for i…4.3
• CVE-2021-21303Helm is open-source software which is essentially "The Kuber…6.8
• CVE-2021-21304Dynamoose is an open-source modeling tool for Amazon's Dynam…9.8
• CVE-2021-21305CarrierWave is an open-source RubyGem which provides a simpl…8.8
• CVE-2021-21306Marked is an open-source markdown parser and compiler (npm p…7.5
• CVE-2021-21307Lucee Server is a dynamic, Java based (JSR-223), tag and scr…9.8
• CVE-2021-21308PrestaShop is a fully scalable open source e-commerce soluti…9.1