VULNERABILITY INTELLIGENCE

CVE-2025-25692

CVSS score6.5 MEDIUM

EPSS probability0.73%

CISA KEVNot currently listed

Published2025-07-30

Last modified2026-07-05

Description

A PHAR deserialization vulnerability in the _getHeaders function of PrestaShop v8.2.0 allows attackers to execute arbitrary code via a crafted POST request.