Medium severity6.7NVD Advisory· Published Aug 7, 2023· Updated Jun 17, 2026

CVE-2023-39524

Description

PrestaShop is an open source e-commerce web application. Prior to version 8.1.1, SQL injection possible in the product search field, in BO's product page. Version 8.1.1 contains a patch for this issue. There are no known workarounds.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
prestashop/prestashopPackagist	< 8.1.1	8.1.1

Affected products

Prestashop/Prestashop2 versions
cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*range: <8.1.1
- (no CPE)range: < 8.1.1
osv-coords2 versions
pkg:bitnami/prestashop pkg:composer/prestashop/prestashop
< 8.1.1+ 1 more
- (no CPE)range: < 8.1.1
- (no CPE)range: < 8.1.1

Patches

Vulnerability mechanics

References

github.com/PrestaShop/PrestaShop/commit/2047d4c053043102bc46a37d383b392704bf14d7nvdPatchWEB
github.com/PrestaShop/PrestaShop/security/advisories/GHSA-75p5-jwx4-qw9hnvdVendor AdvisoryWEB
github.com/advisories/GHSA-75p5-jwx4-qw9hghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2023-39524ghsaADVISORY

News mentions

No linked articles in our index yet.

cvss	0.436
epss	0.001
exploit	0.000
kev	0.000
patch	-0.070
ransomware	0.000