CVE-2023-39526

PrestaShop is an open source e-commerce web application. Versions prior to 1.7.8.10, 8.0.5, and 8.1.1 are vulnerable to remote code execution through SQL injection and arbitrary file write in the back office. Versions 1.7.8.10, 8.0.5, and 8.1.1 contain a patch. There are no known workarounds.

• CWE-89

• https://github.com/PrestaShop/PrestaShop/commit/817847e2347844a9b6add017581f1932bcd28c09Patch
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-gf46-prm4-56pcVendor Advisory
• https://github.com/PrestaShop/PrestaShop/commit/817847e2347844a9b6add017581f1932bcd28c09Patch
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-gf46-prm4-56pcVendor Advisory

Published

Aug 7, 2023

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2023-39520Cryptomator encrypts data being stored on cloud infrastructu…7.8
• CVE-2023-39521Tuleap is an open source suite to improve management of soft…4.8
• CVE-2023-39522goauthentik is an open-source Identity Provider. In affected…5.3
• CVE-2023-39523ScanCode.io is a server to script and automate software comp…8.8
• CVE-2023-39524PrestaShop is an open source e-commerce web application. Pri…9.8
• CVE-2023-39525PrestaShop is an open source e-commerce web application. Pri…9.1
• CVE-2023-39527PrestaShop is an open source e-commerce web application. Ver…6.1
• CVE-2023-39528PrestaShop is an open source e-commerce web application. Pri…8.6
• CVE-2023-39529PrestaShop is an open source e-commerce web application. Pri…9.1
• CVE-2023-3953 A CWE-119: Improper Restriction of Operations within the Bo…5.3
• CVE-2023-39530PrestaShop is an open source e-commerce web application. Pri…9.1
• CVE-2023-39531Sentry is an error tracking and performance monitoring platf…6.8