CVE-2025-61923
PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the backoffice is missing validation on input resulting in a directory traversal and arbitrary file disclosure. The vulnerability is fixed in versions 4.4.1 and 5.0.5. No known workarounds exist.
Vendor
Product
CWE
Yayın Tarihi
2025-10-16 18:15:38
Güncelleme
2025-12-29 20:06:09
Source Identifier
security-advisories@github.com
KEV Date Added
-