CVE-2018-10942: Attribute Wizard Project Attribute Wizard

Critical severity, CVSS 9.8. EPSS: 12.6% chance of exploitation in the next 30 days.

modules/attributewizardpro/file_upload.php in the Attribute Wizard addon 1.6.9 for PrestaShop 1.4.0.1 through 1.6.1.18 allows remote attackers to execute arbitrary code by uploading a .phtml file.

Affected products

Published 2018-05-10. Last modified 2026-06-17.