CVE-2013-6358: Prestashop

High severity, CVSS 8.8. EPSS: 3.7% chance of exploitation in the next 30 days.

PrestaShop 1.5.5 allows remote authenticated attackers to execute arbitrary code by uploading a crafted profile and then accessing it in the module/ directory.

Affected products

• Prestashop Prestashop: version 1.5.5.0 only

Published 2020-01-23. Last modified 2026-06-17.