CVE-2023-25206: Prestashop Advanced Reviews

High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days.

PrestaShop ws_productreviews < 3.6.2 is vulnerable to SQL Injection.

Affected products

• Prestashop Advanced Reviews: before 3.6.2 (fixed in 3.6.2)

Published 2023-03-14. Last modified 2026-06-17.