CVE-2020-9368: Oleacorner Olea Gift On Order

High severity, CVSS 7.5. EPSS: 2% chance of exploitation in the next 30 days.

The Module Olea Gift On Order module through 5.0.8 for PrestaShop enables an unauthenticated user to read arbitrary files on the server via getfile.php?file=/.. directory traversal.

Affected products

• Oleacorner Olea Gift On Order: up to and including 5.0.8

Published 2020-11-02. Last modified 2026-06-17.