PT-2026-28175 · Unknown · Prestashop

Joleliev · Published 2026-03-25 · Updated 2026-03-30 · CVE-2026-33674

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions PrestaShop versions prior to 8.2.5 PrestaShop versions prior to 9.1.0

Description PrestaShop, an open source e-commerce web application, experiences an issue due to improper use of its validation framework. No workarounds are currently available.

Recommendations Update to PrestaShop version 8.2.5 or later. Update to PrestaShop version 9.1.0 or later.

Exploit

Fix

Weakness Enumeration

CWE-1173

Related Identifiers

BIT-PRESTASHOP-2026-33674

CVE-2026-33674

GHSA-283W-XF3Q-788V

Affected Products

Prestashop

References · 10

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/33xxx/CVE-2026-33674.json · Exploit
• https://github.com/PrestaShop/PrestaShop/security/advisories/GHSA-283w-xf3q-788v · Vendor Advisory
• https://osv.dev/vulnerability/BIT-prestashop-2026-33674 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-283w-xf3q-788v · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-33674 · Security Note
• https://osv.dev/vulnerability/CVE-2026-33674 · Vendor Advisory
• https://github.com/PrestaShop/PrestaShop · Note
• https://github.com/PrestaShop/PrestaShop/releases/tag/8.2.5 · Note
• https://github.com/PrestaShop/PrestaShop/releases/tag/9.1.0 · Note
• https://twitter.com/CVEnew/status/2037513423806722326 · Twitter Post