← Database

CVE-2025-25691

MEDIUM CVSS: 6.5 Published: 2025-07-30 Modified: 2026-07-05

Description

A PHAR deserialization vulnerability in the component /themes/import of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.

Affected Platforms

Prestashop Prestashop

Weakness Type

CWE-77, CWE-502

References