{ "document": { "category": "csaf_base", "csaf_version": "2.0", "distribution": { "tlp": { "label": "WHITE" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "The Netherlands Cyber Security Center (henceforth: NCSC-NL) maintains this portal to enhance access to its information and vulnerabilities. The use of this information is subject to the following terms and conditions:\n\nThe vulnerabilities disclosed in this portal are gathered by NCSC-NL from a variety of open sources, which the user can retrieve from other platforms. NCSC-NL makes every reasonable effort to ensure that the content of this portal is kept up to date, and that it is accurate and complete. Nevertheless, NCSC-NL cannot entirely rule out the possibility of errors, and therefore cannot give any warranty in respect of its completeness, accuracy or real-time keeping up-to-date. NCSC-NL does not control nor guarantee the accuracy, relevance, timeliness or completeness of information obtained from these external sources. The vulnerabilities disclosed in this portal are intended solely for the convenience of professional parties to take appropriate measures to manage the risks posed to the cybersecurity. No rights can be derived from the information provided therein.\n\nNCSC-NL and the Kingdom of the Netherlands assume no legal liability or responsibility for any damage resulting from either the use or inability of use of the vulnerabilities disclosed in this portal. This includes damage resulting from the inaccuracy of incompleteness of the information contained in it.\nThe information on this page is subject to Dutch law. All disputes related to or arising from the use of this portal regarding the disclosure of vulnerabilities will be submitted to the competent court in The Hague. This choice of means also applies to the court in summary proceedings." } ], "publisher": { "category": "coordinator", "contact_details": "cert@ncsc.nl", "name": "National Cyber Security Centre", "namespace": "https://www.ncsc.nl/" }, "title": "CVE-2026-33673", "tracking": { "current_release_date": "2026-04-01T15:00:53.710550Z", "generator": { "date": "2026-02-17T15:00:00Z", "engine": { "name": "V.E.L.M.A", "version": "1.7" } }, "id": "CVE-2026-33673", "initial_release_date": "2026-03-25T20:59:56.761039Z", "revision_history": [ { "date": "2026-03-25T20:59:56.761039Z", "number": "1", "summary": "CVE created.| Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (4).| CWES updated (1)." }, { "date": "2026-03-25T20:59:59.589723Z", "number": "2", "summary": "NCSC Score created." }, { "date": "2026-03-26T00:45:45.284208Z", "number": "3", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products connected (107).| Product Identifiers created (111).| Products created (6).| References created (3).| CWES updated (1)." }, { "date": "2026-03-26T00:46:03.192584Z", "number": "4", "summary": "NCSC Score updated." }, { "date": "2026-03-26T22:25:30.576716Z", "number": "5", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| References created (3).| CWES updated (1)." }, { "date": "2026-03-26T22:25:36.477394Z", "number": "6", "summary": "NCSC Score updated." }, { "date": "2026-03-26T22:39:07.859290Z", "number": "7", "summary": "Source created.| CVE status created. (valid)| Description created for source.| CVSS created.| Products created (2).| References created (3).| CWES updated (1)." }, { "date": "2026-03-26T22:39:17.187035Z", "number": "8", "summary": "NCSC Score updated." }, { "date": "2026-03-27T20:56:32.219891Z", "number": "9", "summary": "Source connected.| CVE status created. (valid)| EPSS created." }, { "date": "2026-03-27T20:56:49.328962Z", "number": "10", "summary": "NCSC Score updated." }, { "date": "2026-03-27T21:26:40.394879Z", "number": "11", "summary": "Unknown change." }, { "date": "2026-03-28T07:57:33.307679Z", "number": "12", "summary": "References created (1)." }, { "date": "2026-04-01T14:25:31.184074Z", "number": "13", "summary": "Products connected (2).| Product Identifiers created (2)." }, { "date": "2026-04-01T14:25:33.556321Z", "number": "14", "summary": "NCSC Score updated." }, { "date": "2026-04-01T15:00:22.643341Z", "number": "15", "summary": "NCSC Score updated." } ], "status": "interim", "version": "15" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_version_range", "name": "vers:unknown/<8.2.5", "product": { "name": "vers:unknown/<8.2.5", "product_id": "CSAFPID-5919355" } }, { "category": "product_version_range", "name": "vers:unknown/>=9.0.0-alpha.1|<9.1.0", "product": { "name": "vers:unknown/>=9.0.0-alpha.1|<9.1.0", "product_id": "CSAFPID-5919354" } } ], "category": "product_name", "name": "PrestaShop" }, { "branches": [ { "category": "product_version_range", "name": "vers:unknown/1.7.0.0", "product": { "name": "vers:unknown/1.7.0.0", "product_id": "CSAFPID-2142562", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.0.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0.0-beta.1.0", "product": { "name": "vers:unknown/1.7.0.0-beta.1.0", "product_id": "CSAFPID-3305975", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.0.0-beta.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0.0-beta.2.0", "product": { "name": "vers:unknown/1.7.0.0-beta.2.0", "product_id": "CSAFPID-3305976", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.0.0-beta.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0.0-beta.3.0", "product": { "name": "vers:unknown/1.7.0.0-beta.3.0", "product_id": "CSAFPID-3305977", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.0.0-beta.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0.0-beta.4.0", "product": { "name": "vers:unknown/1.7.0.0-beta.4.0", "product_id": "CSAFPID-3305978", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.0.0-beta.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0.0-rc.0.0", "product": { "name": "vers:unknown/1.7.0.0-rc.0.0", "product_id": "CSAFPID-3305979", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.0.0-rc.0.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0.0-rc.1.0", "product": { "name": "vers:unknown/1.7.0.0-rc.1.0", "product_id": "CSAFPID-5540791", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.0.0-rc.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0.0-rc.2.0", "product": { "name": "vers:unknown/1.7.0.0-rc.2.0", "product_id": "CSAFPID-5540792", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.0.0-rc.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0.1", "product": { "name": "vers:unknown/1.7.0.1", "product_id": "CSAFPID-2142694", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.0.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0.2", "product": { "name": "vers:unknown/1.7.0.2", "product_id": "CSAFPID-2142638", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0.3", "product": { "name": "vers:unknown/1.7.0.3", "product_id": "CSAFPID-2142678", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.0.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0.4", "product": { "name": "vers:unknown/1.7.0.4", "product_id": "CSAFPID-2142585", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.0.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0.5", "product": { "name": "vers:unknown/1.7.0.5", "product_id": "CSAFPID-2142573", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.0.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.0.6", "product": { "name": "vers:unknown/1.7.0.6", "product_id": "CSAFPID-2142602", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.0.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.1.0", "product": { "name": "vers:unknown/1.7.1.0", "product_id": "CSAFPID-2142605", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.1.1", "product": { "name": "vers:unknown/1.7.1.1", "product_id": "CSAFPID-2142540", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.1.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.1.2", "product": { "name": "vers:unknown/1.7.1.2", "product_id": "CSAFPID-2142623", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.1.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.2.0", "product": { "name": "vers:unknown/1.7.2.0", "product_id": "CSAFPID-2142657", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.2.0-rc.1.0", "product": { "name": "vers:unknown/1.7.2.0-rc.1.0", "product_id": "CSAFPID-3305980", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.2.0-rc.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.2.1", "product": { "name": "vers:unknown/1.7.2.1", "product_id": "CSAFPID-2142661", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.2.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.2.2", "product": { "name": "vers:unknown/1.7.2.2", "product_id": "CSAFPID-2142569", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.2.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.2.3", "product": { "name": "vers:unknown/1.7.2.3", "product_id": "CSAFPID-2142551", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.2.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.2.4", "product": { "name": "vers:unknown/1.7.2.4", "product_id": "CSAFPID-2142682", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.2.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.2.5", "product": { "name": "vers:unknown/1.7.2.5", "product_id": "CSAFPID-2142714", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.2.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.3.0", "product": { "name": "vers:unknown/1.7.3.0", "product_id": "CSAFPID-2142706", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.3.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.3.1", "product": { "name": "vers:unknown/1.7.3.1", "product_id": "CSAFPID-2142696", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.3.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.3.2", "product": { "name": "vers:unknown/1.7.3.2", "product_id": "CSAFPID-2142636", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.3.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.3.3", "product": { "name": "vers:unknown/1.7.3.3", "product_id": "CSAFPID-2142677", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.3.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.3.4", "product": { "name": "vers:unknown/1.7.3.4", "product_id": "CSAFPID-2142582", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.3.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.4.0", "product": { "name": "vers:unknown/1.7.4.0", "product_id": "CSAFPID-2142607", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.4.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.4.0-beta.1", "product": { "name": "vers:unknown/1.7.4.0-beta.1", "product_id": "CSAFPID-5540793", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.4.0-beta.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.4.1", "product": { "name": "vers:unknown/1.7.4.1", "product_id": "CSAFPID-2142538", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.4.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.4.2", "product": { "name": "vers:unknown/1.7.4.2", "product_id": "CSAFPID-2142624", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.4.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.4.3", "product": { "name": "vers:unknown/1.7.4.3", "product_id": "CSAFPID-2142622", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.4.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.4.4", "product": { "name": "vers:unknown/1.7.4.4", "product_id": "CSAFPID-2142655", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.4.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.5.0", "product": { "name": "vers:unknown/1.7.5.0", "product_id": "CSAFPID-2142564", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.5.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.5.0-beta.1", "product": { "name": "vers:unknown/1.7.5.0-beta.1", "product_id": "CSAFPID-5540794", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.5.0-beta.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.5.0-rc.1", "product": { "name": "vers:unknown/1.7.5.0-rc.1", "product_id": "CSAFPID-3364198", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.5.0-rc.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.5.1", "product": { "name": "vers:unknown/1.7.5.1", "product_id": "CSAFPID-2142671", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.5.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.5.2", "product": { "name": "vers:unknown/1.7.5.2", "product_id": "CSAFPID-2142571", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.5.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.6.0", "product": { "name": "vers:unknown/1.7.6.0", "product_id": "CSAFPID-2142618", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.6.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.6.0-beta.1", "product": { "name": "vers:unknown/1.7.6.0-beta.1", "product_id": "CSAFPID-3364199", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.6.0-beta.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.6.0-rc.1", "product": { "name": "vers:unknown/1.7.6.0-rc.1", "product_id": "CSAFPID-3364200", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.6.0-rc.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.6.0-rc.2", "product": { "name": "vers:unknown/1.7.6.0-rc.2", "product_id": "CSAFPID-3364201", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.6.0-rc.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.6.1", "product": { "name": "vers:unknown/1.7.6.1", "product_id": "CSAFPID-2142698", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.6.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.6.2", "product": { "name": "vers:unknown/1.7.6.2", "product_id": "CSAFPID-2142639", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.6.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.6.3", "product": { "name": "vers:unknown/1.7.6.3", "product_id": "CSAFPID-2142683", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.6.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.6.4", "product": { "name": "vers:unknown/1.7.6.4", "product_id": "CSAFPID-2142579", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.6.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.6.5", "product": { "name": "vers:unknown/1.7.6.5", "product_id": "CSAFPID-2142572", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.6.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.6.6", "product": { "name": "vers:unknown/1.7.6.6", "product_id": "CSAFPID-2142606", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.6.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.6.7", "product": { "name": "vers:unknown/1.7.6.7", "product_id": "CSAFPID-2142634", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.6.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.6.8", "product": { "name": "vers:unknown/1.7.6.8", "product_id": "CSAFPID-2142630", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.6.8" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.6.9", "product": { "name": "vers:unknown/1.7.6.9", "product_id": "CSAFPID-2142621", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.6.9" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.7.0", "product": { "name": "vers:unknown/1.7.7.0", "product_id": "CSAFPID-2142662", "product_identification_helper": { "cpe": "cpe:2.3:a:prestashop:prestashop:1.7.7.0:*:*:*:*:*:*:*", "purl": "pkg:composer/prestashop/prestashop@1.7.7.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.7.0-beta.1", "product": { "name": "vers:unknown/1.7.7.0-beta.1", "product_id": "CSAFPID-3449166", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.7.0-beta.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.7.0-beta.2", "product": { "name": "vers:unknown/1.7.7.0-beta.2", "product_id": "CSAFPID-3449167", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.7.0-beta.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.7.0-rc.1", "product": { "name": "vers:unknown/1.7.7.0-rc.1", "product_id": "CSAFPID-3449168", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.7.0-rc.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.7.1", "product": { "name": "vers:unknown/1.7.7.1", "product_id": "CSAFPID-2142543", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.7.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.7.2", "product": { "name": "vers:unknown/1.7.7.2", "product_id": "CSAFPID-2142629", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.7.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.7.3", "product": { "name": "vers:unknown/1.7.7.3", "product_id": "CSAFPID-2142620", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.7.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.7.4", "product": { "name": "vers:unknown/1.7.7.4", "product_id": "CSAFPID-2142654", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.7.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.7.5", "product": { "name": "vers:unknown/1.7.7.5", "product_id": "CSAFPID-2142599", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.7.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.7.6", "product": { "name": "vers:unknown/1.7.7.6", "product_id": "CSAFPID-2142541", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.7.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.7.7", "product": { "name": "vers:unknown/1.7.7.7", "product_id": "CSAFPID-2142581", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.7.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.7.8", "product": { "name": "vers:unknown/1.7.7.8", "product_id": "CSAFPID-2142660", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.7.8" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.8.0", "product": { "name": "vers:unknown/1.7.8.0", "product_id": "CSAFPID-2142640", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.8.0" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.8.0-beta.1", "product": { "name": "vers:unknown/1.7.8.0-beta.1", "product_id": "CSAFPID-3449169", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.8.0-beta.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.8.0-rc.1", "product": { "name": "vers:unknown/1.7.8.0-rc.1", "product_id": "CSAFPID-3449170", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.8.0-rc.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.8.1", "product": { "name": "vers:unknown/1.7.8.1", "product_id": "CSAFPID-2142670", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.8.1" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.8.10", "product": { "name": "vers:unknown/1.7.8.10", "product_id": "CSAFPID-3945430", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.8.10" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.8.11", "product": { "name": "vers:unknown/1.7.8.11", "product_id": "CSAFPID-2142641", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.8.11" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.8.2", "product": { "name": "vers:unknown/1.7.8.2", "product_id": "CSAFPID-2142570", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.8.2" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.8.3", "product": { "name": "vers:unknown/1.7.8.3", "product_id": "CSAFPID-2142554", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.8.3" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.8.4", "product": { "name": "vers:unknown/1.7.8.4", "product_id": "CSAFPID-3449171", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.8.4" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.8.5", "product": { "name": "vers:unknown/1.7.8.5", "product_id": "CSAFPID-3449172", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.8.5" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.8.6", "product": { "name": "vers:unknown/1.7.8.6", "product_id": "CSAFPID-2142705", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.8.6" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.8.7", "product": { "name": "vers:unknown/1.7.8.7", "product_id": "CSAFPID-2142697", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.8.7" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.8.8", "product": { "name": "vers:unknown/1.7.8.8", "product_id": "CSAFPID-2142578", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.8.8" } } }, { "category": "product_version_range", "name": "vers:unknown/1.7.8.9", "product": { "name": "vers:unknown/1.7.8.9", "product_id": "CSAFPID-2142676", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@1.7.8.9" } } }, { "category": "product_version_range", "name": "vers:unknown/8.0.0", "product": { "name": "vers:unknown/8.0.0", "product_id": "CSAFPID-2142576", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.0.0" } } }, { "category": "product_version_range", "name": "vers:unknown/8.0.0-beta.1", "product": { "name": "vers:unknown/8.0.0-beta.1", "product_id": "CSAFPID-3669021", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.0.0-beta.1" } } }, { "category": "product_version_range", "name": "vers:unknown/8.0.0-rc.1", "product": { "name": "vers:unknown/8.0.0-rc.1", "product_id": "CSAFPID-3669022", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.0.0-rc.1" } } }, { "category": "product_version_range", "name": "vers:unknown/8.0.1", "product": { "name": "vers:unknown/8.0.1", "product_id": "CSAFPID-2142574", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.0.1" } } }, { "category": "product_version_range", "name": "vers:unknown/8.0.2", "product": { "name": "vers:unknown/8.0.2", "product_id": "CSAFPID-2142690", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/8.0.3", "product": { "name": "vers:unknown/8.0.3", "product_id": "CSAFPID-2142631", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.0.3" } } }, { "category": "product_version_range", "name": "vers:unknown/8.0.4", "product": { "name": "vers:unknown/8.0.4", "product_id": "CSAFPID-2142717", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.0.4" } } }, { "category": "product_version_range", "name": "vers:unknown/8.0.5", "product": { "name": "vers:unknown/8.0.5", "product_id": "CSAFPID-3669023", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.0.5" } } }, { "category": "product_version_range", "name": "vers:unknown/8.1.0", "product": { "name": "vers:unknown/8.1.0", "product_id": "CSAFPID-2142645", "product_identification_helper": { "cpe": "cpe:2.3:a:prestashop:prestashop:8.1.0:*:*:*:*:*:*:*", "purl": "pkg:composer/prestashop/prestashop@8.1.0" } } }, { "category": "product_version_range", "name": "vers:unknown/8.1.0-beta.1", "product": { "name": "vers:unknown/8.1.0-beta.1", "product_id": "CSAFPID-3669024", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.1.0-beta.1" } } }, { "category": "product_version_range", "name": "vers:unknown/8.1.0-rc.1", "product": { "name": "vers:unknown/8.1.0-rc.1", "product_id": "CSAFPID-3669025", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.1.0-rc.1" } } }, { "category": "product_version_range", "name": "vers:unknown/8.1.1", "product": { "name": "vers:unknown/8.1.1", "product_id": "CSAFPID-2583915", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.1.1" } } }, { "category": "product_version_range", "name": "vers:unknown/8.1.2", "product": { "name": "vers:unknown/8.1.2", "product_id": "CSAFPID-2583913", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.1.2" } } }, { "category": "product_version_range", "name": "vers:unknown/8.1.3", "product": { "name": "vers:unknown/8.1.3", "product_id": "CSAFPID-2583917", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.1.3" } } }, { "category": "product_version_range", "name": "vers:unknown/8.1.4", "product": { "name": "vers:unknown/8.1.4", "product_id": "CSAFPID-2583914", "product_identification_helper": { "cpe": "cpe:2.3:a:prestashop:prestashop:8.1.4:*:*:*:*:*:*:*", "purl": "pkg:composer/prestashop/prestashop@8.1.4" } } }, { "category": "product_version_range", "name": "vers:unknown/8.1.5", "product": { "name": "vers:unknown/8.1.5", "product_id": "CSAFPID-2583916", "product_identification_helper": { "cpe": "cpe:2.3:a:prestashop:prestashop:8.1.5:*:*:*:*:*:*:*", "purl": "pkg:composer/prestashop/prestashop@8.1.5" } } }, { "category": "product_version_range", "name": "vers:unknown/8.1.6", "product": { "name": "vers:unknown/8.1.6", "product_id": "CSAFPID-2958867", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.1.6" } } }, { "category": "product_version_range", "name": "vers:unknown/8.1.7", "product": { "name": "vers:unknown/8.1.7", "product_id": "CSAFPID-2062552", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.1.7" } } }, { "category": "product_version_range", "name": "vers:unknown/8.2.0", "product": { "name": "vers:unknown/8.2.0", "product_id": "CSAFPID-3014977", "product_identification_helper": { "cpe": "cpe:2.3:a:prestashop:prestashop:8.2.0:*:*:*:*:*:*:*", "purl": "pkg:composer/prestashop/prestashop@8.2.0" } } }, { "category": "product_version_range", "name": "vers:unknown/8.2.1", "product": { "name": "vers:unknown/8.2.1", "product_id": "CSAFPID-5540795", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.2.1" } } }, { "category": "product_version_range", "name": "vers:unknown/8.2.2", "product": { "name": "vers:unknown/8.2.2", "product_id": "CSAFPID-5540796", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.2.2" } } }, { "category": "product_version_range", "name": "vers:unknown/8.2.3", "product": { "name": "vers:unknown/8.2.3", "product_id": "CSAFPID-5540797", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.2.3" } } }, { "category": "product_version_range", "name": "vers:unknown/8.2.4", "product": { "name": "vers:unknown/8.2.4", "product_id": "CSAFPID-5913151", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@8.2.4" } } }, { "category": "product_version_range", "name": "vers:unknown/9.0.0", "product": { "name": "vers:unknown/9.0.0", "product_id": "CSAFPID-5540784", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@9.0.0" } } }, { "category": "product_version_range", "name": "vers:unknown/9.0.0-alpha.1", "product": { "name": "vers:unknown/9.0.0-alpha.1", "product_id": "CSAFPID-5540785", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@9.0.0-alpha.1" } } }, { "category": "product_version_range", "name": "vers:unknown/9.0.0-beta.1", "product": { "name": "vers:unknown/9.0.0-beta.1", "product_id": "CSAFPID-5540786", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@9.0.0-beta.1" } } }, { "category": "product_version_range", "name": "vers:unknown/9.0.0-rc.1", "product": { "name": "vers:unknown/9.0.0-rc.1", "product_id": "CSAFPID-5540787", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@9.0.0-rc.1" } } }, { "category": "product_version_range", "name": "vers:unknown/9.0.1", "product": { "name": "vers:unknown/9.0.1", "product_id": "CSAFPID-5540788", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@9.0.1" } } }, { "category": "product_version_range", "name": "vers:unknown/9.0.2", "product": { "name": "vers:unknown/9.0.2", "product_id": "CSAFPID-5540789", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@9.0.2" } } }, { "category": "product_version_range", "name": "vers:unknown/9.0.3", "product": { "name": "vers:unknown/9.0.3", "product_id": "CSAFPID-5913147", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@9.0.3" } } }, { "category": "product_version_range", "name": "vers:unknown/9.1.0-beta.1", "product": { "name": "vers:unknown/9.1.0-beta.1", "product_id": "CSAFPID-5913148", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@9.1.0-beta.1" } } }, { "category": "product_version_range", "name": "vers:unknown/9.1.0-rc.1", "product": { "name": "vers:unknown/9.1.0-rc.1", "product_id": "CSAFPID-5913149", "product_identification_helper": { "purl": "pkg:composer/prestashop/prestashop@9.1.0-rc.1" } } }, { "category": "product_version_range", "name": "vers:unknown/<8.2.5", "product": { "name": "vers:unknown/<8.2.5", "product_id": "CSAFPID-5973192", "product_identification_helper": { "cpe": "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*" } } }, { "category": "product_version_range", "name": "vers:unknown/>=0|<8.2.5", "product": { "name": "vers:unknown/>=0|<8.2.5", "product_id": "CSAFPID-5913152" } }, { "category": "product_version_range", "name": "vers:unknown/>=9.0.0-alpha.1|<9.1.0", "product": { "name": "vers:unknown/>=9.0.0-alpha.1|<9.1.0", "product_id": "CSAFPID-5913150" } }, { "category": "product_version_range", "name": "vers:unknown/>=9.0.0|<9.1.0", "product": { "name": "vers:unknown/>=9.0.0|<9.1.0", "product_id": "CSAFPID-5973193", "product_identification_helper": { "cpe": "cpe:2.3:a:prestashop:prestashop:*:*:*:*:*:*:*:*" } } } ], "category": "product_name", "name": "prestashop" } ], "category": "vendor", "name": "PrestaShop" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-33673", "cwe": { "id": "CWE-79", "name": "Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')" }, "notes": [ { "category": "description", "text": "### Impact\nMultiple stored Cross-Site Scripting (stored XSS) vulnerabilities in the BO: an attacker who can inject data into the database, via limited back-office access or a previously existing vulnerability, can exploit unprotected variables in back-office templates.\n\n### Patches\nPatched on 8.2.5 and 9.1.0\n\n### Workarounds\nNone\n\n### References\nNone", "title": "github - https://api.github.com/advisories/GHSA-35pf-37c6-jxjv" }, { "category": "description", "text": "### Impact\nMultiple stored Cross-Site Scripting (stored XSS) vulnerabilities in the BO: an attacker who can inject data into the database, via limited back-office access or a previously existing vulnerability, can exploit unprotected variables in back-office templates.\n\n### Patches\nPatched on 8.2.5 and 9.1.0\n\n### Workarounds\nNone\n\n### References\nNone", "title": "osv - https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Packagist%2FGHSA-35pf-37c6-jxjv.json?alt=media" }, { "category": "description", "text": "PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 are vulnerable to stored Cross-Site Scripting (stored XSS) vulnerabilities in the BO. An attacker who can inject data into the database, via limited back-office access or a previously existing vulnerability, can exploit unprotected variables in back-office templates. Versions 8.2.5 and 9.1.0 contain a fix. No known workarounds are available.", "title": "nvd - https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-33673" }, { "category": "description", "text": "PrestaShop is an open source e-commerce web application. Versions prior to 8.2.5 and 9.1.0 are vulnerable to stored Cross-Site Scripting (stored XSS) vulnerabilities in the BO. An attacker who can inject data into the database, via limited back-office access or a previously existing vulnerability, can exploit unprotected variables in back-office templates. Versions 8.2.5 and 9.1.0 contain a fix. No known workarounds are available.", "title": "cveprojectv5 - https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33673.json" }, { "category": "other", "text": "0.00036", "title": "EPSS" }, { "category": "other", "text": "4.5", "title": "NCSC Score" }, { "category": "other", "text": "Is related to CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')), Is related to (a version of) an uncommon product, The value of the most recent EPSS score", "title": "NCSC Score top decreasing factors" } ], "product_status": { "known_affected": [ "CSAFPID-2062552", "CSAFPID-2142538", "CSAFPID-2142540", "CSAFPID-2142541", "CSAFPID-2142543", "CSAFPID-2142551", "CSAFPID-2142554", "CSAFPID-2142562", "CSAFPID-2142564", "CSAFPID-2142569", "CSAFPID-2142570", "CSAFPID-2142571", "CSAFPID-2142572", "CSAFPID-2142573", "CSAFPID-2142574", "CSAFPID-2142576", "CSAFPID-2142578", "CSAFPID-2142579", "CSAFPID-2142581", "CSAFPID-2142582", "CSAFPID-2142585", "CSAFPID-2142599", "CSAFPID-2142602", "CSAFPID-2142605", "CSAFPID-2142606", "CSAFPID-2142607", "CSAFPID-2142618", "CSAFPID-2142620", "CSAFPID-2142621", "CSAFPID-2142622", "CSAFPID-2142623", "CSAFPID-2142624", "CSAFPID-2142629", "CSAFPID-2142630", "CSAFPID-2142631", "CSAFPID-2142634", "CSAFPID-2142636", "CSAFPID-2142638", "CSAFPID-2142639", "CSAFPID-2142640", "CSAFPID-2142641", "CSAFPID-2142645", "CSAFPID-2142654", "CSAFPID-2142655", "CSAFPID-2142657", "CSAFPID-2142660", "CSAFPID-2142661", "CSAFPID-2142662", "CSAFPID-2142670", "CSAFPID-2142671", "CSAFPID-2142676", "CSAFPID-2142677", "CSAFPID-2142678", "CSAFPID-2142682", "CSAFPID-2142683", "CSAFPID-2142690", "CSAFPID-2142694", "CSAFPID-2142696", "CSAFPID-2142697", "CSAFPID-2142698", "CSAFPID-2142705", "CSAFPID-2142706", "CSAFPID-2142714", "CSAFPID-2142717", "CSAFPID-2583913", "CSAFPID-2583914", "CSAFPID-2583915", "CSAFPID-2583916", "CSAFPID-2583917", "CSAFPID-2958867", "CSAFPID-3014977", "CSAFPID-3305975", "CSAFPID-3305976", "CSAFPID-3305977", "CSAFPID-3305978", "CSAFPID-3305979", "CSAFPID-3305980", "CSAFPID-3364198", "CSAFPID-3364199", "CSAFPID-3364200", "CSAFPID-3364201", "CSAFPID-3449166", "CSAFPID-3449167", "CSAFPID-3449168", "CSAFPID-3449169", "CSAFPID-3449170", "CSAFPID-3449171", "CSAFPID-3449172", "CSAFPID-3669021", "CSAFPID-3669022", "CSAFPID-3669023", "CSAFPID-3669024", "CSAFPID-3669025", "CSAFPID-3945430", "CSAFPID-5540784", "CSAFPID-5540785", "CSAFPID-5540786", "CSAFPID-5540787", "CSAFPID-5540788", "CSAFPID-5540789", "CSAFPID-5540791", "CSAFPID-5540792", "CSAFPID-5540793", "CSAFPID-5540794", "CSAFPID-5540795", "CSAFPID-5540796", "CSAFPID-5540797", "CSAFPID-5913147", "CSAFPID-5913148", "CSAFPID-5913149", "CSAFPID-5913150", "CSAFPID-5913151", "CSAFPID-5913152", "CSAFPID-5919354", "CSAFPID-5919355", "CSAFPID-5973192", "CSAFPID-5973193" ] }, "references": [ { "category": "external", "summary": "Source - github", "url": "https://api.github.com/advisories/GHSA-35pf-37c6-jxjv" }, { "category": "external", "summary": "Source - osv", "url": "https://www.googleapis.com/download/storage/v1/b/osv-vulnerabilities/o/Packagist%2FGHSA-35pf-37c6-jxjv.json?alt=media" }, { "category": "external", "summary": "Source - nvd", "url": "https://services.nvd.nist.gov/rest/json/cves/2.0?cveId=CVE-2026-33673" }, { "category": "external", "summary": "Source - cveprojectv5", "url": "https://raw.githubusercontent.com/CVEProject/cvelistV5/main/cves/2026/33xxx/CVE-2026-33673.json" }, { "category": "external", "summary": "Source - first", "url": "https://api.first.org/data/v1/epss?limit=10000&offset=0" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv", "url": "https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-35pf-37c6-jxjv" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv", "url": "https://github.com/PrestaShop/PrestaShop/releases/tag/8.2.5" }, { "category": "external", "summary": "Reference - cveprojectv5; github; nvd; osv", "url": "https://github.com/PrestaShop/PrestaShop/releases/tag/9.1.0" }, { "category": "external", "summary": "Reference - github", "url": "https://github.com/advisories/GHSA-35pf-37c6-jxjv" }, { "category": "external", "summary": "Reference - github", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-33673" } ], "scores": [ { "cvss_v3": { "version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:H/PR:H/UI:R/S:C/C:H/I:H/A:H", "baseScore": 7.6, "baseSeverity": "HIGH" }, "products": [ "CSAFPID-2062552", "CSAFPID-2142538", "CSAFPID-2142540", "CSAFPID-2142541", "CSAFPID-2142543", "CSAFPID-2142551", "CSAFPID-2142554", "CSAFPID-2142562", "CSAFPID-2142564", "CSAFPID-2142569", "CSAFPID-2142570", "CSAFPID-2142571", "CSAFPID-2142572", "CSAFPID-2142573", "CSAFPID-2142574", "CSAFPID-2142576", "CSAFPID-2142578", "CSAFPID-2142579", "CSAFPID-2142581", "CSAFPID-2142582", "CSAFPID-2142585", "CSAFPID-2142599", "CSAFPID-2142602", "CSAFPID-2142605", "CSAFPID-2142606", "CSAFPID-2142607", "CSAFPID-2142618", "CSAFPID-2142620", "CSAFPID-2142621", "CSAFPID-2142622", "CSAFPID-2142623", "CSAFPID-2142624", "CSAFPID-2142629", "CSAFPID-2142630", "CSAFPID-2142631", "CSAFPID-2142634", "CSAFPID-2142636", "CSAFPID-2142638", "CSAFPID-2142639", "CSAFPID-2142640", "CSAFPID-2142641", "CSAFPID-2142645", "CSAFPID-2142654", "CSAFPID-2142655", "CSAFPID-2142657", "CSAFPID-2142660", "CSAFPID-2142661", "CSAFPID-2142662", "CSAFPID-2142670", "CSAFPID-2142671", "CSAFPID-2142676", "CSAFPID-2142677", "CSAFPID-2142678", "CSAFPID-2142682", "CSAFPID-2142683", "CSAFPID-2142690", "CSAFPID-2142694", "CSAFPID-2142696", "CSAFPID-2142697", "CSAFPID-2142698", "CSAFPID-2142705", "CSAFPID-2142706", "CSAFPID-2142714", "CSAFPID-2142717", "CSAFPID-2583913", "CSAFPID-2583914", "CSAFPID-2583915", "CSAFPID-2583916", "CSAFPID-2583917", "CSAFPID-2958867", "CSAFPID-3014977", "CSAFPID-3305975", "CSAFPID-3305976", "CSAFPID-3305977", "CSAFPID-3305978", "CSAFPID-3305979", "CSAFPID-3305980", "CSAFPID-3364198", "CSAFPID-3364199", "CSAFPID-3364200", "CSAFPID-3364201", "CSAFPID-3449166", "CSAFPID-3449167", "CSAFPID-3449168", "CSAFPID-3449169", "CSAFPID-3449170", "CSAFPID-3449171", "CSAFPID-3449172", "CSAFPID-3669021", "CSAFPID-3669022", "CSAFPID-3669023", "CSAFPID-3669024", "CSAFPID-3669025", "CSAFPID-3945430", "CSAFPID-5540784", "CSAFPID-5540785", "CSAFPID-5540786", "CSAFPID-5540787", "CSAFPID-5540788", "CSAFPID-5540789", "CSAFPID-5540791", "CSAFPID-5540792", "CSAFPID-5540793", "CSAFPID-5540794", "CSAFPID-5540795", "CSAFPID-5540796", "CSAFPID-5540797", "CSAFPID-5913147", "CSAFPID-5913148", "CSAFPID-5913149", "CSAFPID-5913150", "CSAFPID-5913151", "CSAFPID-5913152", "CSAFPID-5919354", "CSAFPID-5919355", "CSAFPID-5973192", "CSAFPID-5973193" ] } ], "title": "CVE-2026-33673" } ] }