CVE-2026-33674

PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 improperly use the validation framework. Versions 8.2.5 and 9.1.0 contain a fix. No known workarounds are available.

Score

CVSS 3.1 5.3 Medium

Status

Analyzed - security-advisories@github.com

Published

2026-03-26

Last modified

2026-03-30

Weaknesses

CWE-1173

Affected products

• Prestashop (Prestashop)

References

• https://github.com/PrestaShop/PrestaShop/releases/tag/8.2.5
• https://github.com/PrestaShop/PrestaShop/releases/tag/9.1.0
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-283w-xf3q-788v