https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-08T06:27:08.611856+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-255271 EUVD-2026-255271 2026-10-08T06:27:08.614992+00:00 EUVD-2026-255271 https://cve.radiocsirt.org/vuln/fkie_cve-2025-61923 fkie_cve-2025-61923 2026-10-08T06:27:08.615051+00:00

PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the backoffice is missing validation on input resulting in a directory traversal and arbitrary file disclosure. The vulnerability is fixed in versions 4.4.1 and 5.0.5. No known workarounds exist.

 https://cve.radiocsirt.org/vuln/ghsa-fpxp-pfqm-x54w GHSA-fpxp-pfqm-x54w — PrestaShop Checkout Backoffice directory traversal allows arbitrary file disclosure 2026-10-08T06:27:08.615112+00:00

Affected: Packagist: prestashop/ps_checkout

# Impact Missing validation on input vulnerable to directory traversal.

# Patches The problem has been patched in versions:

v4.4.1 for PrestaShop 1.7 (build number: 7.4.4.1) v4.4.1 for PrestaShop 8 (build number: 8.4.4.1) v5.0.5 for PrestaShop 1.7 (build number: 7.5.0.5) v5.0.5 for PrestaShop 8 (build number: 8.5.0.5) v5.0.5 for PrestaShop 9 (build number: 9.5.0.5)

Read the [Versioning policy](https://github.com/PrestaShopCorp/ps_checkout/wiki/Versioning) to learn more about the build number.

# Credits [Léo CUNÉAZ](https://github.com/inem0o) for reportied this issue.