CVE-2020-21967: Prestashop

Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days.

File upload vulnerability in the Catalog feature in Prestashop 1.7.6.7 allows remote attackers to run arbitrary code via the add new file page.

Affected products

• Prestashop Prestashop: version 1.7.6.7 only

Published 2022-07-13. Last modified 2026-06-17.