Packagist/prestashop/prestashop CVE-2023-43663: medium 4.3, EPSS 0.42%

PrestaShop allows users to uninstall modules from backoffice, even with low rights

Action: Upgrade prestashop/prestashop to 8.1.2 or later.

composer require prestashop/prestashop:8.1.2

Affected

Fixed versions

Sources

• osv: GHSA-6jmf-2pfc-q9m7
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-6jmf-2pfc-q9m7
• https://nvd.nist.gov/vuln/detail/CVE-2023-43663
• https://github.com/PrestaShop/PrestaShop/commit/ce1f67083537194e974caf86c57e547a0aaa46cd
• https://github.com/PrestaShop/PrestaShop

CVE-2023-43663 · published 2023-09-28T16:27:33Z · modified 2026-09-10T03:49:57.869758102Z · JSON