Servers and applications
CVE-2025-25691
A PHAR deserialization vulnerability in the component /themes/import of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.
- Severity
- Medium 6.5
- Published
- 30 Jul 2025
- Last changed
- 5 Jul 2026
- Added to UpHeron
- 1 Nov 2026
- Sources
- NVD
Affected software
| Software | Affected versions |
|---|---|
PrestaShopServers and applications · cpe:a:prestashop:prestashop |
|