https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-24T11:55:08.605002+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-191958 EUVD-2026-191958 2026-10-24T11:55:08.607753+00:00 EUVD-2026-191958 https://cve.radiocsirt.org/vuln/fkie_cve-2023-39525 fkie_cve-2023-39525 2026-10-24T11:55:08.607786+00:00

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, in the back office, files can be compromised using path traversal by replaying the import file deletion query with a specified file path that uses the traversal path. Version 8.1.1 contains a patch for this issue. There are no known workarounds.

 https://cve.radiocsirt.org/vuln/ghsa-m9r4-3fg7-pqm2 GHSA-m9r4-3fg7-pqm2 — PrestaShop path traversal 2026-10-24T11:55:08.607816+00:00

Affected: Packagist: prestashop/prestashop

### Impact In the back office, files can be compromised using path traversal by replaying the import file deletion query with a specified file path, using traversal path.

### Patches 8.1.1

### Found by Aleksey Solovev (Positive Technologies)

### Workarounds none

### References none

 https://cve.radiocsirt.org/vuln/gsd-2023-39525 gsd-2023-39525 2026-10-24T11:55:08.607843+00:00 gsd-2023-39525