https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T16:40:08.460740+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/euvd-2026-277919 EUVD-2026-277919 2026-10-05T16:40:08.509923+00:00 EUVD-2026-277919 https://cve.radiocsirt.org/vuln/fkie_cve-2026-33673 fkie_cve-2026-33673 2026-10-05T16:40:08.509962+00:00

PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 are vulnerable to stored Cross-Site Scripting (stored XSS) vulnerabilities in the BO. An attacker who can inject data into the database, via limited back-office access or a previously existing vulnerability, can exploit unprotected variables in back-office templates. Versions 8.2.5 and 9.1.0 contain a fix. No known workarounds are available.

 https://cve.radiocsirt.org/vuln/ghsa-35pf-37c6-jxjv GHSA-35pf-37c6-jxjv — PrestaShop has multiple stored XSS vulnerabilities via unprotected Template variables 2026-10-05T16:40:08.509995+00:00

Affected: Packagist: prestashop/prestashop

### Impact Multiple stored Cross-Site Scripting (stored XSS) vulnerabilities in the BO: an attacker who can inject data into the database, via limited back-office access or a previously existing vulnerability, can exploit unprotected variables in back-office templates.

### Patches Patched on 8.2.5 and 9.1.0

### Workarounds None

### References None