All vulnerabilities

Servers and applications

GHSA-5p6p-mx64-96jf

Path traversal in back-office email translations allows arbitrary file write leading to remote code execution

Severity
High 7.2
Published
9 Nov 2026
Last changed
9 Nov 2026
Added to UpHeron
9 Nov 2026
Fixed in
8.2.9, 9.2.1
Sources
Project advisories (GitHub)

Affected software

SoftwareAffected versions
PrestaShopServers and applications · github:prestashop/prestashop
  • From 8.0.0 before 8.2.9
  • From 9.0.0 before 9.2.1

References