CVE-2025-51586: Prestashop

Low severity, CVSS 3.7. EPSS: 0.8% chance of exploitation in the next 30 days.

An issue was discoverd in file controllers/admin/AdminLoginController.php in PrestaShop before 8.2.1 allowing attackers to gain sensitive information via the reset password feature.

Affected products

• Prestashop Prestashop: before 8.2.1 (fixed in 8.2.1)

Published 2025-09-08. Last modified 2026-06-17.