CVE-2021-40814: Mypresta Customer Photo Gallery

Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days.

The Customer Photo Gallery addon before 2.9.4 for PrestaShop is vulnerable to SQL injection.

Affected products

• Mypresta Customer Photo Gallery: before 2.9.4 (fixed in 2.9.4)

Published 2021-09-08. Last modified 2026-06-17.