CyberSecBulletin

Prestaworld vulnerabilities

We track 2 vulnerabilities in Prestaworld products across 2 products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 3, 2024.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Prestaworld vulnerabilities

  • 7.5 High severity

    prestasalesmanager: Improper Privilege Management

    CVE-2024-25842Prestaworld

    An issue was discovered in Presta World "Account Manager - Sales Representative & Dealers - CRM" (prestasalesmanager) module for PrestaShop before version 9.0, allows remote attackers to escalate privilege and obtain sensitive information via the uploadLogo()

  • 7.5 High severity

    prestasalesmanager: Path Traversal: 'dir....filename'

    CVE-2024-25840Prestaworld

    In the module "Account Manager | Sales Representative & Dealers | CRM" (prestasalesmanager) up to 9.0 from Presta World for PrestaShop, a guest can download personal information without restriction by performing a path traversal attack.