CVE-2020-15160: Prestashop

Critical severity, CVSS 9.8. EPSS: 10.8% chance of exploitation in the next 30 days.

PrestaShop from version 1.7.5.0 and before version 1.7.6.8 is vulnerable to a blind SQL Injection attack in the Catalog Product edition page with location parameter. The problem is fixed in 1.7.6.8

Affected products

• Prestashop Prestashop: from 1.7.5.0, before 1.7.6.8 (fixed in 1.7.6.8)

Published 2020-09-24. Last modified 2026-06-17.