{"action":"Upgrade prestashop/prestashop to 1.7.8.2 or later.","affected":[{"fixed":"1.7.8.2","introduced":"1.7.5.0"}],"component":"prestashop/prestashop","cve_ids":["CVE-2021-43789"],"ecosystem":"Packagist","epss":0.04699,"exploited":false,"fixed_versions":["1.7.8.2"],"ghsa_id":"GHSA-6xxj-gcjq-wgf4","id":"tcs_01M5KEXHHDZ7RSAHYZPWY86DFJ","modified_at":"2026-07-08T06:29:13.564288026Z","published_at":"2021-12-07T21:23:17Z","references":["https://osv.dev/vulnerability/GHSA-6xxj-gcjq-wgf4","https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-6xxj-gcjq-wgf4","https://nvd.nist.gov/vuln/detail/CVE-2021-43789","https://github.com/PrestaShop/PrestaShop/issues/26623","https://github.com/PrestaShop/PrestaShop/commit/6482b9ddc9dcebf7588dbfd616d2d635218408d6","https://cwe.mitre.org/data/definitions/89.html","https://github.com/PrestaShop/PrestaShop","https://github.com/PrestaShop/PrestaShop/releases/tag/1.7.8.2"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GHSA-6xxj-gcjq-wgf4","url":"https://osv.dev/vulnerability/GHSA-6xxj-gcjq-wgf4"}],"summary":"SQL injection in prestashop/prestashop"}