PT-2026-28175 · Unknown · Prestashop

Joleliev · Publicado 2026-03-25 · Atualizado 2026-03-30 · CVE-2026-33674

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions PrestaShop versions prior to 8.2.5 PrestaShop versions prior to 9.1.0

Description PrestaShop, an open source e-commerce web application, experiences an issue due to improper use of its validation framework. No workarounds are currently available.

Recommendations Update to PrestaShop version 8.2.5 or later. Update to PrestaShop version 9.1.0 or later.

Exploit

Correção

Enumeração de Fraquezas

CWE-1173

Identificadores relacionados

BIT-PRESTASHOP-2026-33674

CVE-2026-33674

GHSA-283W-XF3Q-788V

Produtos afetados

Prestashop

Referências · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33674.json · Exploit
• https://github.com/PrestaShop/PrestaShop · Nota
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-283w-xf3q-788v · Aviso do Fabricante
• https://github.com/PrestaShop/PrestaShop/releases/tag/8.2.5 · Nota
• https://github.com/PrestaShop/PrestaShop/releases/tag/9.1.0 · Nota
• https://osv.dev/vulnerability/BIT-prestashop-2026-33674 · Aviso do Fabricante
• https://twitter.com/CVEnew/status/2037513423806722326 · Publicação no Twitter
• https://osv.dev/vulnerability/GHSA-283w-xf3q-788v · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2026-33674 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2026-33674 · Aviso do Fabricante