CVE-2020-4074highCWE-287

CVE-2020-4074: high-severity vulnerability in PrestaShop

Improper Authentication

Published · Updated

Follow this CVE+ Monitor PrestaShop

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

21Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 8.9epss 1.8%
In PrestaShop from version 1.5.0.0 and before version 1.7.6.6, the authentication system is malformed and an attacker is able to forge requests and execute admin commands. The problem is fixed in 1.7.6.6.
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:L
Affected products
PrestaShop · PrestaShop
Related CVEs — PrestaShop

In the same product, most dangerous first.

CVE-2024-34716CRITICALPrestaShop vulnerable to XSS via customer contact form in FO, through file uploadEPSS 56.4%CVE-2020-15160—Blind SQL Injection in PrestaShopEPSS 10.8%CVE-2022-31181CRITICALRemote code execution in prestashopEPSS 6.7%CVE-2021-43789HIGHBlind SQLi using Search filters in PrestaShopEPSS 4.7%CVE-2021-21302MEDIUMCSV Injection via csv exportEPSS 2.4%CVE-2021-21308MEDIUMImproper session management for soft logoutEPSS 1.9%