VULNERABILITY INTELLIGENCE

CVE-2025-61923

CVSS score4.1 MEDIUM

EPSS probability0.92%

CISA KEVNot currently listed

Published2025-10-16

Last modified2026-10-09

Description

PrestaShop Checkout is the PrestaShop official payment module in partnership with PayPal. In versions prior to 4.4.1 and 5.0.5, the backoffice is missing validation on input resulting in a directory traversal and arbitrary file disclosure. The vulnerability is fixed in versions 4.4.1 and 5.0.5. No known workarounds exist.