CVE-2026-44212
1 advisory.
Packagist/prestashop/prestashop CVE-2026-44212: critical 9.3, EPSS 0.42%
PrestaShop has a stored XSS executable in customer service view
Action: Upgrade prestashop/prestashop to 8.2.6 or later.
composer require prestashop/prestashop:8.2.6composer require prestashop/prestashop:9.1.1Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 8.2.6 | - |
| 9.0.0 | 9.1.1 | - |
Fixed versions
| 8.2.6 | 9.1.1 |
Sources
- osv: GHSA-w9f3-qc75-qgx9
- https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-w9f3-qc75-qgx9
- https://github.com/PrestaShop/PrestaShop
CVE-2026-44212 · published · modified · JSON