CVE-2021-21302: Prestashop

High severity, CVSS 7.2. EPSS: 2.4% chance of exploitation in the next 30 days.

PrestaShop is a fully scalable open source e-commerce solution. In PrestaShop before version 1.7.2 there is a CSV Injection vulnerability possible by using shop search keywords via the admin panel. The problem is fixed in 1.7.7.2

Affected products

• Prestashop Prestashop: after 1.5.0.0, before 1.7.7.2 (fixed in 1.7.7.2)

Published 2021-02-26. Last modified 2026-06-17.